Management Group
A container above subscriptions used to apply governance and policy across many subscriptions at once.
Management groups are containers that sit above subscriptions in the Azure hierarchy, letting organizations manage governance at scale. When Azure Policy or role-based access control (RBAC) is applied to a management group, every subscription and resource beneath it inherits those settings automatically, avoiding per-subscription configuration. The key exam distinction is from resource groups: resource groups hold resources within a single subscription, while management groups span multiple subscriptions. Management groups can be nested, and a single root management group exists at the top of each Microsoft Entra ID tenant.
PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →