Management and Governance
This domain covers how you organize, govern, and manage Azure resources and the tools used to interact with the platform. Focus on the resource hierarchy, policy, and management tooling.
Resource organization hierarchy
Resources live in resource groups, which belong to subscriptions, which can be grouped under management groups. This hierarchy lets you apply access control and policy at the right scope, with settings inheriting downward. Management groups help govern many subscriptions consistently.
Governance with Policy and RBAC
Azure Policy enforces organizational rules, for example allowed regions or required tags, and reports compliance. Azure role-based access control grants least-privilege permissions to identities at a chosen scope. Resource locks prevent accidental deletion or modification of critical resources.
Management tooling
You manage Azure through the web-based Azure portal, the Azure CLI and Azure PowerShell for scripting, Azure Cloud Shell in the browser, and the Azure mobile app. Azure Resource Manager templates and Bicep deploy infrastructure as code for repeatable provisioning.
Monitoring and cost governance
Azure Monitor collects metrics and logs, and Microsoft Cost Management with budgets and alerts tracks and controls spending. Tags label resources for cost allocation and organization. Azure Advisor recommends improvements across cost, security, reliability, and performance.