Soru

Zorluk: Çok zorAzure Resources, Resource Groups, Subscriptions, and Management Groups

An organization is restructuring its Azure environment to streamline governance. As part of this effort, an administrator plans to transition an existing Azure subscription from a department-specific management group to a new shared-services management group. Is the following statement true or false?

When the Azure subscription is moved to the new parent management group, all Azure Role-Based Access Control (RBAC) role assignments and Azure Policy assignments applied directly to the subscription are automatically deleted and must be recreated.

Cevap: Cevap

Cevap

False
The correct answer is false because moving an Azure subscription to a new parent management group only alters inherited policies and RBAC roles from the hierarchy. Any role assignments or policy assignments that were applied directly to the subscription are stored as properties of that subscription resource and remain fully intact.

Adım Adım Çözüm

1
Analyze the action being performed: moving an Azure subscription between two management groups in the Azure hierarchy.
The subscription changes its parent node in the management group tree.
This establishes the context of hierarchical inheritance vs. direct resource settings.
2
Evaluate the impact on inherited governance elements.
Azure Policy and RBAC assignments inherited from the source management group are lost, and those from the target management group are now inherited.
Governance inherits downwards in the Azure hierarchy.
3
Evaluate the impact on direct (local) governance elements applied at the subscription level.
Directly applied RBAC roles and policies remain unchanged because they are defined on the subscription resource itself, not inherited.
Moving a subscription does not alter its internal resource properties or direct metadata.

Anahtar Kavram

Azure Policy and RBAC inheritance rules when moving subscriptions between management groups.
Bu soruyu puanla