SOLVED

New Subscription and Management Group

%3CLINGO-SUB%20id%3D%22lingo-sub-1120438%22%20slang%3D%22en-US%22%3ENew%20Subscription%20and%20Management%20Group%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1120438%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20a%20doubt%2C%20we%20have%20an%20EA%20agreement%20where%20we%20have%20multiple%20departments%20created%2C%20each%20department%20has%20assigned%20an%20AO.%20So%20the%20AO%20could%20create%20one%20or%20multiple%20subscriptions%20under%20this%20deparment.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOur%20team%2C%20manage%20the%20governance%20of%20the%20Azure%20portal%2C%20so%20what%20we%20have%20done%20is%20the%20following%3A%26nbsp%3B%3C%2FP%3E%3CP%3E-%20We%20have%20deployed%20a%20Root%20Management%20Groups%20in%20Azure%3C%2FP%3E%3CP%3E-%20this%20RMG%20has%20multiple%20policies%20included%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20we%20want%20to%20achieve%20and%20my%20question%2C%20regards%20to%3A%3C%2FP%3E%3CP%3E-%20If%20a%20user%20creates%20a%20subscription%20via%20EA%20portal%2C%20we%20want%20to%20set%20automatically%20this%20subscription%20in%20the%20RMG%2C%20doing%20this%2C%20will%20be%20inherit%20policies%2C%20and%20other%20things%20in%20order%20to%20follow%20the%20governance%20guidelines%20that%20we%20have%20set%20in%20the%20company.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20thought%20about%20implementing%20and%20automation%20account%20to%20be%20run%20every%20night%20and%20set%20those%20subscriptions%20to%20a%20RMG%2C%20but%20i'm%20looking%20for%20another%20possibilities%20in%20order%20the%20event%20of%20subscription%20creation%20has%20been%20fired%20to%20set%20the%20subscription%20to%20a%20RMG.%20Is%20it%20possible%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1120438%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EGovernance%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Emanagement%20group%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1121278%22%20slang%3D%22en-US%22%3ERe%3A%20New%20Subscription%20and%20Management%20Group%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1121278%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F36485%22%20target%3D%22_blank%22%3E%40Alberto%20Andr%C3%A9s%20Rodr%C3%ADguez%3C%2FA%3E%2C%20if%20you're%20using%20the%20default%20root%20MG%2C%20every%20new%20subscription%20lands%20there%20by%20default.%20If%20it's%20not%20the%20case%2C%20then%20you%20could%20also%20listen%20to%20Azure%20Subscription%20events%20with%20a%20Logic%20App%20or%20Event%20Grid%20and%20implement%20the%20required%20behaviour%20with%20an%20Azure%20Function.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi All,

 

I have a doubt, we have an EA agreement where we have multiple departments created, each department has assigned an AO. So the AO could create one or multiple subscriptions under this deparment.

 

Our team, manage the governance of the Azure portal, so what we have done is the following: 

- We have deployed a Root Management Groups in Azure

- this RMG has multiple policies included

 

What we want to achieve and my question, regards to:

- If a user creates a subscription via EA portal, we want to set automatically this subscription in the RMG, doing this, will be inherit policies, and other things in order to follow the governance guidelines that we have set in the company.

 

I have thought about implementing and automation account to be run every night and set those subscriptions to a RMG, but i'm looking for another possibilities in order the event of subscription creation has been fired to set the subscription to a RMG. Is it possible?

 

Thanks in advance

1 Reply
best response confirmed by hspinto (Microsoft)
Solution

@Alberto Andrés Rodríguez, if you're using the default root MG, every new subscription lands there by default. If it's not the case, then you could also listen to Azure Subscription events with a Logic App or Event Grid and implement the required behaviour with an Azure Function.