From the course: Microsoft Azure Administrator Associate (AZ-104) Cert Prep by Microsoft Press
Unlock this course with a free trial
Join today to access over 24,100 courses taught by industry experts.
Understanding governance and hierarchies - Azure Tutorial
From the course: Microsoft Azure Administrator Associate (AZ-104) Cert Prep by Microsoft Press
Understanding governance and hierarchies
- The core principle for any system should be using least privileged access. That is to only allow access to something if it's required, or to put another way, don't just give every user full owner access over everything, allowing them to create, destroy and delete any object. If a user only needs to manage storage accounts or to provide access to allow them to manage storage accounts. However, if you've got thousands of users granting access to each user on a per user resource, per type basis would be unmanageable. Therefore, in this lecture we'll examine the hierarchical structure of management groups that help us manage our permissions. We can assign user access to the resources they need at different scopes. These can be management groups, subscriptions, resource groups, or the individual resources. As we can see in this diagram, the relationship between these scopes are hierarchical and permissions all roll to the higher levels flow down to the child levels. Management groups can…