docs: clarify parent management group choice in Decision 6 - #4240
Open
Git-PrinceNagar wants to merge 1 commit into
Open
docs: clarify parent management group choice in Decision 6#4240Git-PrinceNagar wants to merge 1 commit into
Git-PrinceNagar wants to merge 1 commit into
Conversation
Decision 6 did not explain that the parent may be the Tenant Root Group or an existing management group underneath it, nor give a criterion for choosing between them. Issue #4198 asked why one would pick either option. - State both options and when to choose each - Note the Owner requirement on the chosen parent, linking to the phase 1 prerequisites and the Permissions FAQ - Note that adding a management group above the intermediate root management group is not required in order to use your own naming, linking to the Terraform customization page Also corrects a statement that has been stale since v7.0.0: role assignments are applied at the intermediate root management group and are no longer applied at the parent management group. Closes #4198 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Git-PrinceNagar
force-pushed
the
git-princenagar-shiny-carnival
branch
from
August 14, 2026 04:53
577e9c7 to
651cf88
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Overview
Fixes #4198
Decision 6 asks you to choose a parent management group, but does not say that this can be the
Tenant Root Groupor an existing management group underneath it, and gives no criterion for choosing between the two. The issue asks why you would pick either option, and why using an existing management group appears to add a level compared with the published Azure landing zone architecture diagrams.This also corrects a statement in the same section that has been stale since v7.0.0.
Changes
docs/content/accelerator/0_planning.md, Decision 6 only.Ownerrequirement on the chosen parent, linking to the phase 1 prerequisites and the Permissions FAQ.Correction
The current text says the hierarchy is built underneath the parent "with only permission applied at that scope". This has not been accurate since v7.0.0:
The "no policies are applied at that scope" half is still correct and is retained.
Testing
Documentation-only change.
hugobuilds successfully (358 pages, no errors). All three{{< relref >}}links resolve.Platform Subscriptions and Permissions,Permissions FAQ,Customize Management Group Names and IDs).root_parent_management_group_id, and for Terraform its ID and display name are taken from the management group with noparent_idin the architecture definition. The renaming guidance matches the existingcontoso-alz/Contosoworked example in the Terraform options documentation.starter-bicep.