Subscriptions
Source: https://www.youtube.com/watch?v=9vKAYW_WkLo&list=PLlVtbbG169nED0_vMEniWBQjSoxTsBYS3&index=11
A Subscription is a base unit of an agreement between a customer and microsoft
This is a billing boundary as well as a boundary for security
Azure AD is a tenant within azure that contains groups, users, devices, etc
Every subscription trusts 1 and only one 1 Azure AD tenant
You can once again apply budget, RBAC, and policies to subscriptions
You might have one or more RGs in that subscription with their own budgets or policies, but by default they will inherit from the subscription
You might have a Prod subscription and a Dev subscription
You can move some stuff between subscriptions, but that is rather limited so you should always try to provision in the proper subscription
Last updated