Resource Hirearchy Flashcards
What is Resource Hierarchy in Azure?
Resource Hierarchy in Azure refers to the organizational structure that allows for easier management and centralized access control of resources, including management groups, subscriptions, resource groups, and individual resources.
What is the parent-child relationship in Resource Hierarchy?
The parent-child relationship means that any policies and permissions applied at higher levels (parents) of the Resource Hierarchy are automatically inherited by lower-level objects (children).
How is Resource Hierarchy similar to file systems?
Resource Hierarchy in Azure is similar to file systems where each level (folder) can have child objects (subfolders) that inherit permissions from their parent. This concept applies to Azure’s management structure.
Explain the hierarchy levels in Azure Resource Management.
The hierarchy levels in Azure Resource Management are:
Management groups (topmost parent)
Subscriptions
Resource groups
Individual Azure resources (children)
Can a subscription be part of more than one management group?
No, a subscription can only belong to one management group. However, management groups can have multiple subscriptions assigned to them.
How are permissions and roles inherited in Resource Hierarchy?
Permissions and roles assigned at higher levels (like management groups or subscriptions) are automatically inherited by lower-level objects such as resource groups and resources.
What happens when a user is assigned an owner role at the management group level?
If a user is assigned an owner role at the management group level, they will have owner access to all resources within the subscriptions, resource groups, and individual resources nested under that management group.
Give an example of policy application in Resource Hierarchy.
An example would be applying a policy at the management group level that restricts VM creation to a specific region. This policy would apply to all nested subscriptions, resource groups, and resources within that management group.
What is the main takeaway regarding Azure Resource Hierarchy?
The main takeaway is that policies and permissions applied at higher levels cascade down to lower-level objects, ensuring consistent management and access control. Understanding the parent-child relationship and inheritance principle is crucial for effective resource management in Azure.
