Microsoft CAF reasoning being using intermediary management root group over the default root managem

Hi adampra86. One reason for the intermediate root group would be so that you have the flexibility to define other intermediate root groups should you have a need. Let's say you acquire a company that has different policy than you do currently. You may need to bring their subscriptions and policies into the fold without clobbering their existing configuration and keep yours intact as well. This way you could have Company A intermediate root group with Policy and RBAC that flows down to child groups, and Company B with its own Policy and RBAC that flows down to child groups.