default a subscription to a management group

How could you enforce a new subscription to be assigned to an existing management group, other than the root management group? Could you use an Azure policy at the root group management to do it?