question

JamieMcFarling-2320 avatar image
0 Votes"
JamieMcFarling-2320 asked JamieMcFarling-2320 commented

Subscription Management/ Governance

I have some questions.

  1. Are we able to prevent users within our organization from creating Subscriptions using the Visual Studio/Dev or other means in our Azure tenant?

  2. If now, what is the recommended way to appropriately govern existing/new Subscriptions to ensure that people do not do dumb things within their subscription space that could compromise our organization?

I feel like the answer to number 1, based upon my research, is no... but I'm not 100% on that, and I know that there are some governance pieces within Management groups, Azure Defender and probably some other areas (RBAC?) where we could govern Subscriptions if we can't prevent the creation of them, but I wanted to hear from some veterans of Azure out there related to this topic.

Thanks in advance!



azure-policy
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SadiqhAhmed-MSFT avatar image
1 Vote"
SadiqhAhmed-MSFT answered

@JamieMcFarling-2320 Thank you for your post and I apologize for the delayed response!

Please refer to this similar thread - https://docs.microsoft.com/en-us/answers/questions/40809/azure-subscription-governance-best-practice-archit.html might be helpful.
Also check this GitHub link - https://github.com/MicrosoftDocs/azure-docs/issues/29092#issuecomment-846867398

Let me know if you further details/assistance in this matter.


If the response helped, do "Accept Answer" and up-vote it

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you, this was immensely helpful in helping me clarify the path that I was going down.

0 Votes 0 ·
KenievaMSFT-5537 avatar image
0 Votes"
KenievaMSFT-5537 answered JamieMcFarling-2320 commented

You can use Azure Policy to restrict certain operations on subscriptions.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you, this will come into play for what we're after as well.

0 Votes 0 ·