Skip to content

Naming

Disclaimer

This page is still under development and is not ready for use. The information provided is subject to change. Use at your own risk.

What is a Management Group?

A Management Group in Azure is a container that helps you organize and manage multiple Azure subscriptions. It allows you to aggregate subscriptions under a single, hierarchical structure, making it easier to manage resources and policies across multiple subscriptions.

Usage of Management Groups

Management Groups are used for several purposes:

  1. Hierarchical Organization: Management Groups help in creating a hierarchical structure for subscriptions, making it easier to organize and manage resources.
  2. Policy Enforcement: Policies can be applied at the Management Group level, ensuring consistent compliance across all underlying resources.
  3. Cost Management: Management Groups help in tracking costs associated with different departments or projects by categorizing resources.
  4. Access Control: Management Groups enable fine-grained access control, allowing you to control who can access resources at various levels.
  5. Simplified Management: By using Management Groups, you can simplify the management of large numbers of subscriptions, making it easier to find and manage resources.

Why a Naming Policy is Important

A good naming policy is crucial for several reasons:

  1. Clarity and Organization: A consistent naming policy ensures that Management Groups are easily identifiable and organized, making it simpler to find and manage them.
  2. Compliance: Adhering to naming policies can help in meeting organizational and industry-specific compliance requirements.
  3. Documentation: Well-named Management Groups provide a valuable reference for documentation, making it easier for teams to understand the purpose and usage of resources.
  4. Scalability: As the environment grows, a good naming policy ensures that new Management Groups are added in a predictable and manageable way.

Importance in an Azure Landing Zone

In an Azure Landing Zone, Management Groups play a critical role:

  • Governance: Management Groups help in defining a governance structure that ensures all subscriptions are consistent with the Landing Zone architecture.
  • Policy Compliance: Policies can be enforced at the Management Group level, ensuring that all resources adhere to the Landing Zone policies.
  • Cost Management: Management Groups help in tracking costs and budgeting for different departments or projects within the Landing Zone.
  • Access Control: Fine-grained access control can be applied at the Management Group level, ensuring that only authorized users can access resources.

Example Naming Scheme

For Management Groups in Yellow Arrow, the following naming convention is used:

  • Customer Name
  • Environment
  • Type
  • Department

Customer Name: short abbreviation of the customer name - Note the prefix used during rollout; this will be used by automation for additional configurations.

Environment: PROD/ACC/TST - Note the purpose of the environment.

Type: MGT - Type indicates that it is a Management Group.

Circle: WPB/DAT/SEC/APP - Circle indicates the responsible circle or department.

Example: STLFY-PROD-MGT-WPB

By following this naming convention, teams can maintain a clean and organized environment, which is essential for effective resource management and cost control.