Design for governance

In the previous step you were introduced to the activity and what the desired learning outcomes are throughout this activity. In this step you will learn about designing for governance.

Governance provides mechanisms and processes to maintain control over your applications and resources in Azure. Governance involves determining your requirements, planning your initiatives, and setting strategic priorities.

To effectively apply your governance strategies, you must first create a hierarchical structure. This structure lets you apply governance strategies exactly where they’re needed. The governance strategies we’ll cover in this module are Azure policy and resource tags.

A typical Azure hierarchy has four levels: management groups, subscriptions, resource groups, and resources. We’ll examine each level in more detail, but here’s an overview.

Management groups help you manage access, policy, and compliance for multiple subscriptions.

Subscriptions are logical containers that serve as units of management and scale. Subscriptions are also billing boundaries.

Resource groups are logical containers into which Azure resources are deployed and managed.

Resources are instances of services that you create. For example, virtual machines, storage, and SQL databases.

Note!

The tenant root group contains all the management groups and subscriptions. This group allows global policies and Azure role assignments to be applied at the directory level.

In the following step, we will learn about the design for management groups. Remember to click on Mark as complete and then Next to continue.