The policy assigned to the management group cannot take effect during the create subscription process. Is this the design?

Question

The policy assigned to the management group cannot take effect during the create subscription process. Is this the design?

txsun 0

We found that the policies assigned to the management group cannot take effect during the subscription creation process

After the subscription is created, we can identify new subscriptions that do not comply through compliance and modify them through remediation task.

The problem is why it cannot take effect during the subscription creation process Do we need to confirm if this is in accordance with the design? I did not see any relevant statements in the Azure documentation.

Naveena Patlolla 1,805 Reputation points Microsoft External Staff

2025-04-29T10:57:24.4866667+00:00
Hi txsun

Please confirm whether the new subscription is placed under a management group.

If yes, verify the policies assigned to that management group these policies will be inherited by the subscription and apply to its resources.

If no, move the subscription into the appropriate management group to ensure policy inheritance.

For more details on policy scopes and best practices for managing policies, please refer to the links provided below. reference example of policy assigned at management group scope.

Recommendation: When creating a new subscription, ensure it is created directly under the appropriate Management Group. This ensures that all policies, role-based access controls (RBAC), and governance settings defined at the management group level are automatically inherited by the subscription from the start.

https://learn.microsoft.com/en-us/azure/governance/policy/overview#recommendations-for-managing-policies

https://learn.microsoft.com/en-us/azure/governance/policy/concepts/scope

Feel free to reach out if you have any further concerns. We're here to help you.

If the comment was helpful, please click "Upvote"

Your answer

Naveena Patlolla 1,805 Reputation points Microsoft External Staff

2025-04-29T10:57:24.4866667+00:00

Hi txsun

Please confirm whether the new subscription is placed under a management group.

If yes, verify the policies assigned to that management group these policies will be inherited by the subscription and apply to its resources.

If no, move the subscription into the appropriate management group to ensure policy inheritance.

For more details on policy scopes and best practices for managing policies, please refer to the links provided below. reference example of policy assigned at management group scope.

Recommendation: When creating a new subscription, ensure it is created directly under the appropriate Management Group. This ensures that all policies, role-based access controls (RBAC), and governance settings defined at the management group level are automatically inherited by the subscription from the start.

https://learn.microsoft.com/en-us/azure/governance/policy/overview#recommendations-for-managing-policies

https://learn.microsoft.com/en-us/azure/governance/policy/concepts/scope

Feel free to reach out if you have any further concerns. We're here to help you.

If the comment was helpful, please click "Upvote"

Share via

The policy assigned to the management group cannot take effect during the create subscription process. Is this the design?

Your answer