Re: azure lighthouse Query

Hi venkat !
Here it is !! you can understand this is in simple terms

Delegated Scope: Subscription vs Resource Group

When creating an ARM template for Azure Lighthouse, you need to specify the delegated scope, which determines the level of access and management capabilities for the service provider.

Here are the key differences between "subscription" and "resource group" in the delegated scope field:

Subscription
Scope: The entire Azure subscription
Access: The service provider has access to all resources within the subscription, including resource groups, resources, and subscriptions.
Management: The service provider can manage all aspects of the subscription, including billing, policies, and access control.
Resource Group
Scope: A specific Azure resource group
Access: The service provider has access only to the specified resource group and its resources.
Management: The service provider can manage only the resources within the specified resource group, without access to other resources or subscriptions.