Azure Subscriptions and Role Assignments for Departmental Separation | Microsoft AZ-500 Exam Guide

Configure Same Role Assignments for Multiple Azure Subscriptions

Question

Your company plans to create separate subscriptions for each department. Each subscription will be associated to the same Azure Active Directory (Azure AD) tenant.

You need to configure each subscription to have the same role assignments.

What should you use?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D

Just as a blueprint allows an engineer or an architect to sketch a project's design parameters, Azure Blueprints enables cloud architects and central information technology groups to define a repeatable set of Azure resources that implements and adheres to an organization's standards, patterns, and requirements.

Blueprints are a declarative way to orchestrate the deployment of various resource templates and other artifacts such as:

-> Role Assignments

-> Policy Assignments

-> Azure Resource Manager templates

-> Resource Groups

https://docs.microsoft.com/en-us/azure/governance/blueprints/overview

To configure each subscription to have the same role assignments, we can use Azure Blueprints. Azure Blueprints is a service in Azure that allows for the creation of pre-configured environments that can be deployed quickly and consistently across multiple subscriptions and resource groups. It can be used to define and enforce standards, policies, and procedures across an organization.

Using Azure Blueprints, we can create a blueprint that defines the role assignments that we want to apply to each subscription. The blueprint can be configured to include any custom roles that have been defined in Azure AD or any built-in roles that are available in Azure.

Once the blueprint has been created, it can be assigned to each subscription. When the blueprint is assigned, the role assignments that were defined in the blueprint are automatically applied to the subscription. This ensures that each subscription has the same role assignments, which helps to maintain consistency and improve security across the organization.

In summary, to configure each subscription to have the same role assignments, we should use Azure Blueprints. Azure Blueprints allows for the creation of pre-configured environments that can be deployed quickly and consistently across multiple subscriptions and resource groups.