Skip to content

Commit 343ea66

Browse files
authored
Merge pull request #281370 from ShawnJackson/articles-about-management-groups
[AQ] edit pass: Articles about management groups
2 parents 4af193e + e744ef1 commit 343ea66

17 files changed

+345
-348
lines changed

articles/azure-resource-manager/bicep/deploy-to-management-group.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -250,7 +250,7 @@ To use an ARM template to create a new Azure subscription in a management group,
250250
* [Programmatically create Azure subscriptions for a Microsoft Customer Agreement](../../cost-management-billing/manage/programmatically-create-subscription-microsoft-customer-agreement.md)
251251
* [Programmatically create Azure subscriptions for a Microsoft Partner Agreement](../../cost-management-billing/manage/programmatically-create-subscription-microsoft-partner-agreement.md)
252252

253-
To deploy a template that moves an existing Azure subscription to a new management group, see [Move subscriptions in ARM template](../../governance/management-groups/manage.md#move-subscriptions-in-arm-template)
253+
To deploy a template that moves an existing Azure subscription to a new management group, see [Move subscriptions in ARM template](../../governance/management-groups/manage.md#move-a-subscription-in-an-arm-template)
254254

255255
## Azure Policy
256256

articles/azure-resource-manager/management/move-resource-group-and-subscription.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,7 @@ There are some important steps to do before moving a resource. By verifying thes
6666
* [Networking move guidance](./move-limitations/networking-move-limitations.md)
6767
* [Recovery Services move guidance](../../backup/backup-azure-move-recovery-services-vault.md?toc=/azure/azure-resource-manager/toc.json)
6868
* [Virtual Machines move guidance](./move-limitations/virtual-machines-move-limitations.md)
69-
* To move an Azure subscription to a new management group, see [Move subscriptions](../../governance/management-groups/manage.md#move-subscriptions).
69+
* To move an Azure subscription to a new management group, see [Move subscriptions](../../governance/management-groups/manage.md#move-management-groups-and-subscriptions).
7070

7171
1. The destination subscription must be registered for the resource provider of the resource being moved. If not, you receive an error stating that the **subscription is not registered for a resource type**. You might see this error when moving a resource to a new subscription, but that subscription has never been used with that resource type.
7272

articles/azure-resource-manager/templates/deploy-to-management-group.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -234,7 +234,7 @@ To use an ARM template to create a new Azure subscription in a management group,
234234
* [Programmatically create Azure subscriptions for a Microsoft Customer Agreement](../../cost-management-billing/manage/programmatically-create-subscription-microsoft-customer-agreement.md)
235235
* [Programmatically create Azure subscriptions for a Microsoft Partner Agreement](../../cost-management-billing/manage/programmatically-create-subscription-microsoft-partner-agreement.md)
236236

237-
To deploy a template that moves an existing Azure subscription to a new management group, see [Move subscriptions in ARM template](../../governance/management-groups/manage.md#move-subscriptions-in-arm-template)
237+
To deploy a template that moves an existing Azure subscription to a new management group, see [Move subscriptions in ARM template](../../governance/management-groups/manage.md#move-a-subscription-in-an-arm-template)
238238

239239
## Azure Policy
240240

articles/cost-management-billing/manage/programmatically-create-subscription-enterprise-agreement.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -499,5 +499,5 @@ resource subToMG 'Microsoft.Management/managementGroups/subscriptions@2020-05-01
499499

500500
* Now that you created a subscription, you can grant that ability to other users and service principals. For more information, see [Grant access to create Azure Enterprise subscriptions (preview)](grant-access-to-create-subscription.md).
501501
* For more information about managing large numbers of subscriptions using management groups, see [Organize your resources with Azure management groups](../../governance/management-groups/overview.md).
502-
* To change the management group for a subscription, see [Move subscriptions](../../governance/management-groups/manage.md#move-subscriptions).
502+
* To change the management group for a subscription, see [Move subscriptions](../../governance/management-groups/manage.md#move-management-groups-and-subscriptions).
503503
* For advanced subscription creation scenarios using REST API, see [Alias - Create](/rest/api/subscription/2021-10-01/alias/create).

articles/cost-management-billing/manage/programmatically-create-subscription-microsoft-customer-agreement-across-tenants.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -196,4 +196,4 @@ Content-Type: application/json
196196

197197
* Now that you've created a subscription, you can grant that ability to other users and service principals. For more information, see [Grant access to create Azure Enterprise subscriptions (preview)](grant-access-to-create-subscription.md).
198198
* For more information about managing large numbers of subscriptions using management groups, see [Organize your resources with Azure management groups](../../governance/management-groups/overview.md).
199-
* To change the management group for a subscription, see [Move subscriptions](../../governance/management-groups/manage.md#move-subscriptions).
199+
* To change the management group for a subscription, see [Move subscriptions](../../governance/management-groups/manage.md#move-management-groups-and-subscriptions).

articles/cost-management-billing/manage/programmatically-create-subscription-microsoft-customer-agreement.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -613,5 +613,5 @@ resource subToMG 'Microsoft.Management/managementGroups/subscriptions@2020-05-01
613613

614614
* Now that you've created a subscription, you can grant that ability to other users and service principals. For more information, see [Grant access to create Azure Enterprise subscriptions (preview)](grant-access-to-create-subscription.md).
615615
* For more information about managing large numbers of subscriptions using management groups, see [Organize your resources with Azure management groups](../../governance/management-groups/overview.md).
616-
* To change the management group for a subscription, see [Move subscriptions](../../governance/management-groups/manage.md#move-subscriptions).
616+
* To change the management group for a subscription, see [Move subscriptions](../../governance/management-groups/manage.md#move-management-groups-and-subscriptions).
617617
* For advanced subscription creation scenarios using REST API, see [Alias - Create](/rest/api/subscription/2021-10-01/alias/create).

articles/governance/management-groups/create-management-group-azure-cli.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,9 +30,9 @@ directory. You receive a notification when the process is complete. For more inf
3030

3131
- Any Microsoft Entra ID user in the tenant can create a management group without the management group write
3232
permission assigned to that user if
33-
[hierarchy protection](./how-to/protect-resource-hierarchy.md#setting---require-authorization)
33+
[hierarchy protection](./how-to/protect-resource-hierarchy.md#setting-require-authorization)
3434
isn't enabled. This new management group becomes a child of the Root Management Group or the
35-
[default management group](./how-to/protect-resource-hierarchy.md#setting---default-management-group)
35+
[default management group](./how-to/protect-resource-hierarchy.md#setting-define-the-default-management-group)
3636
and the creator is given an "Owner" role assignment. Management group service allows this ability
3737
so that role assignments aren't needed at the root level. No users have access to the Root
3838
Management Group when it's created. To avoid the hurdle of finding the Microsoft Entra ID Global Admins to

articles/governance/management-groups/create-management-group-dotnet.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,9 +30,9 @@ directory. You receive a notification when the process is complete. For more inf
3030

3131
- Any Microsoft Entra ID user in the tenant can create a management group without the management group write
3232
permission assigned to that user if
33-
[hierarchy protection](./how-to/protect-resource-hierarchy.md#setting---require-authorization)
33+
[hierarchy protection](./how-to/protect-resource-hierarchy.md#setting-require-authorization)
3434
isn't enabled. This new management group becomes a child of the Root Management Group or the
35-
[default management group](./how-to/protect-resource-hierarchy.md#setting---default-management-group)
35+
[default management group](./how-to/protect-resource-hierarchy.md#setting-define-the-default-management-group)
3636
and the creator is given an "Owner" role assignment. Management group service allows this ability
3737
so that role assignments aren't needed at the root level. No users have access to the Root
3838
Management Group when it's created. To avoid the hurdle of finding the Microsoft Entra ID Global Admins to

articles/governance/management-groups/create-management-group-go.md

Lines changed: 31 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -31,9 +31,9 @@ directory. You receive a notification when the process is complete. For more inf
3131

3232
- Any Microsoft Entra ID user in the tenant can create a management group without the management group write
3333
permission assigned to that user if
34-
[hierarchy protection](./how-to/protect-resource-hierarchy.md#setting---require-authorization)
34+
[hierarchy protection](./how-to/protect-resource-hierarchy.md#setting-require-authorization)
3535
isn't enabled. This new management group becomes a child of the Root Management Group or the
36-
[default management group](./how-to/protect-resource-hierarchy.md#setting---default-management-group)
36+
[default management group](./how-to/protect-resource-hierarchy.md#setting-define-the-default-management-group)
3737
and the creator is given an "Owner" role assignment. Management group service allows this ability
3838
so that role assignments aren't needed at the root level. No users have access to the Root
3939
Management Group when it's created. To avoid the hurdle of finding the Microsoft Entra ID Global Admins to
@@ -85,39 +85,39 @@ that can create a management group.
8585
package main
8686

8787
import (
88-
"context"
89-
"fmt"
90-
"os"
88+
"context"
89+
"fmt"
90+
"os"
9191

92-
mg "github.com/Azure/azure-sdk-for-go/services/resources/mgmt/2020-05-01/managementgroups"
93-
"github.com/Azure/go-autorest/autorest/azure/auth"
92+
mg "github.com/Azure/azure-sdk-for-go/services/resources/mgmt/2020-05-01/managementgroups"
93+
"github.com/Azure/go-autorest/autorest/azure/auth"
9494
)
9595

9696
func main() {
97-
// Get variables from command line arguments
98-
var mgName = os.Args[1]
99-
100-
// Create and authorize a client
101-
mgClient := mg.NewClient()
102-
authorizer, err := auth.NewAuthorizerFromCLI()
103-
if err == nil {
104-
mgClient.Authorizer = authorizer
105-
} else {
106-
fmt.Printf(err.Error())
107-
}
108-
109-
// Create the request
110-
Request := mg.CreateManagementGroupRequest{
111-
Name: &mgName,
112-
}
113-
114-
// Run the query and get the results
115-
var results, queryErr = mgClient.CreateOrUpdate(context.Background(), mgName, Request, "no-cache")
116-
if queryErr == nil {
117-
fmt.Printf("Results: " + fmt.Sprint(results) + "\n")
118-
} else {
119-
fmt.Printf(queryErr.Error())
120-
}
97+
// Get variables from command line arguments
98+
var mgName = os.Args[1]
99+
100+
// Create and authorize a client
101+
mgClient := mg.NewClient()
102+
authorizer, err := auth.NewAuthorizerFromCLI()
103+
if err == nil {
104+
mgClient.Authorizer = authorizer
105+
} else {
106+
fmt.Printf(err.Error())
107+
}
108+
109+
// Create the request
110+
Request := mg.CreateManagementGroupRequest{
111+
Name: &mgName,
112+
}
113+
114+
// Run the query and get the results
115+
var results, queryErr = mgClient.CreateOrUpdate(context.Background(), mgName, Request, "no-cache")
116+
if queryErr == nil {
117+
fmt.Printf("Results: " + fmt.Sprint(results) + "\n")
118+
} else {
119+
fmt.Printf(queryErr.Error())
120+
}
121121
}
122122
```
123123

articles/governance/management-groups/create-management-group-javascript.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,9 +28,9 @@ directory. You receive a notification when the process is complete. For more inf
2828

2929
- Any Microsoft Entra ID user in the tenant can create a management group without the management group write
3030
permission assigned to that user if
31-
[hierarchy protection](./how-to/protect-resource-hierarchy.md#setting---require-authorization)
31+
[hierarchy protection](./how-to/protect-resource-hierarchy.md#setting-require-authorization)
3232
isn't enabled. This new management group becomes a child of the Root Management Group or the
33-
[default management group](./how-to/protect-resource-hierarchy.md#setting---default-management-group)
33+
[default management group](./how-to/protect-resource-hierarchy.md#setting-define-the-default-management-group)
3434
and the creator is given an "Owner" role assignment. Management group service allows this ability
3535
so that role assignments aren't needed at the root level. No users have access to the Root
3636
Management Group when it's created. To avoid the hurdle of finding the Microsoft Entra ID Global Admins to

0 commit comments

Comments
 (0)