AZ-104 Question 52
Single answerYou are an Azure Administrator for Contoso, a global enterprise with multiple Azure subscriptions in your tenant. You have set up a root management group to help enforce resource governance across all existing and future subscriptions. However, newly created subscriptions are not automatically placed under the root management group. You need to ensure that all new subscriptions inherit the policies applied at the root level. Which of the following actions must you take to meet this requirement?
- A
Rename the root management group to 'RootMG' so that new subscriptions can be automatically assigned to it
- B
Move all subscriptions to a single resource group within your primary subscription
- C
Elevate access to manage all Azure subscriptions and management groups, then set the root management group as the default container for new subscriptions
- D
Create a custom role at the root management group level that automatically adds new subscriptions into it
Show answer and explanation
Correct answer: C
Explanation
To ensure that new subscriptions inherit policies from the root management group, you must elevate your privileges and set the root management group as the default parent for all subscriptions. This ensures consistent policy enforcement across the entire Azure environment.
- A. Incorrect.
Changing the name of the management group alone does not configure new subscriptions to be placed under it or enforce policy inheritance
- B. Incorrect.
Moving all subscriptions to one resource group does not impact management group hierarchy and does not ensure new subscriptions will inherit the root scope's policies by default
- C. Correct.
By elevating access at the tenant root level and configuring the root management group as the default container, newly created subscriptions will be placed here automatically and inherit root-level policies
- D. Incorrect.
Creating a custom role at the root level does not automatically add subscriptions to the root management group; it only defines permissions