Azure Management Groups
Management groups provide a governance scope for Azure subscriptions to manage access, policies and compliance. You organize subscriptions into …
Access to your Azure resources are managed by Azure Access Control (RBAC). Access control gives your the possibility to manage who has access to your resources and what they can do with them.
Access can be assigned on a resource group level, subscription level or management group level and to users, groups, service principals, or managed identities. Access control cascades down to all resources in the resource group, subscription, or management group.
You can manage access to your Azure resources by using the Azure portal, PowerShell, Azure CLI, Azure Resource Manager templates, or the Azure REST API.