default a subscription to a management group

Microsoft

How could you enforce a new subscription to be assigned to an existing management group, other than the root management group? Could you use an Azure policy at the root group management to do it?  

5 Replies

@khaled1405 , this is isn't something you can't change currently, but I read somewhere this is in the product roadmap for soon, i.e., being able to specify the default Management Group for new subscriptions. I don't know the ETA, though.

Thanks @hspinto. Do you know who would be the best person to ask about the road map? 

Answered in private message.

@khaled1405, I wish to have that implemented by the policy. For now, the way to do that is to react to the subscription creation event or periodically move a subscription to one of MGs with a script ( Azure Functions/ Azure Automations/ any other compute. )

 

I can add writing about that to my backlog if you're interested in that.

Thanks @kwiecek. I think the best approach until we get the native feature is to have an external workflow to request a subscription. That workflow will assign the subscription to the right management group and assign a custom RBAC on the subscription to the users. A blueprint could potentially make it more elegant.