Management groups are containers that help you manage access, policy and compliance across multiple [[Azure Subscription]]s - Limit the regions where [[Virtual Machine]] can be created, across subscriptions. - Provide user access to multiple subscriptions by creating one [[role assignment ]]inherited by other subscriptions. - Monitor and audit role and policy assignments, across subscriptions. Characteristics:  Aggregate [[Azure Policy]] assignments, support up to six levels of depth, default new subscriptions under the root management group. ## Resources [Management groups - Cloud Adoption Framework | Microsoft Learn](https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/design-area/resource-org-management-groups)