Home › Azure AZ-104 › cloudcomputing › az104identitygovernance › An organisation has 50 Azure subscriptions and w…
An organisation has 50 Azure subscriptions and wants to enforce policy and roll up billing across all of them. Which combination is correct?
ACreate 50 separate Entra tenants, one per subscription
BGroup subscriptions under management groups for inheritance of Azure Policy + RBAC; consolidate billing in an Enterprise Agreement / Microsoft Customer Agreement billing scope
CUse only NSGs for subscription-level policy
DStore every subscription's resources in a single resource group
Answer & Solution
Correct answer: B. Group subscriptions under management groups for inheritance of Azure Policy + RBAC; consolidate billing in an Enterprise Agreement / Microsoft Customer Agreement billing scope
Management groups handle Policy + RBAC inheritance at scale; billing rolls up via EA/MCA scope. Separate tenants would defeat consolidation; NSGs aren't subscription policy; flattening 50 subs into one RG is unmanageable.
Related questions
Which approach satisfies a compliance requirement that admin-level activity on a critical Which Entra ID feature lets you require additional verification for a user the moment theiWhich Azure construct lets you enforce a rule that "only resources tagged with a `cost-cenAn admin wants to give a contractor read-only access to ONE specific resource group for 30Which Azure feature lets administrators temporarily revoke all changes to a resource — proWhich Entra ID feature lets an organisation invite external users (partners, contractors) Which combination represents the correct Azure resource hierarchy from highest scope to loWhich Azure construct lets administrators enforce "all storage accounts must require HTTPS