Skip to content

Commit bfa19b8

Browse files
authored
Merge pull request #1 from cynthn/patch-572531
Sugestions for Service Groups overview.md
2 parents 09530ec + ae868dc commit bfa19b8

File tree

5 files changed

+73
-106
lines changed

5 files changed

+73
-106
lines changed

articles/governance/index.yml

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,17 @@ productDirectory:
4040
text: Protect your resource hierarchy
4141
- url: ./management-groups/index.yml
4242
text: See more >
43+
- title: Azure Service Groups
44+
imageSrc: ./media/management-groups.svg
45+
links:
46+
- url: ./service-groups/overview.md
47+
text: Developer overview
48+
- url: ./service-groups/create-service-group-rest-api.md
49+
text: Create a service group using the REST API
50+
- url: ./service-groups/create-service-group-member-rest-api.md
51+
text: Connect resources or resource containers to service groups
52+
- url: ./service-groups/manage-service-groups.md
53+
text: Manage Service Groups
4354
- title: Azure Policy
4455
imageSrc: ./media/azure-policy.svg
4556
links:

articles/governance/service-groups/create-service-group-member-rest-api.md

Lines changed: 11 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,21 @@
11
---
2-
title: Quickstart: Connect service group members with REST API
2+
title: "Quickstart: Connect Service Group members using the REST API"
33
description: In this quickstart, you use REST API to connect a resource to a service group with a service group member relationship.
44
author: rthorn17
55
ms.author: rithorn
6-
ms.service: Azure Service Groups
7-
ms.topic: quickstart #Don't change
6+
ms.service: azure-governance
7+
ms.topic: quickstart
88
ms.date: 5/19/2025
99
---
1010

1111

1212
# Quickstart: Connect resources or resource containers to service groups with Service Group Member Relationships
1313

14-
Service Groups are designed to be flexible and scalable, allowing organizations to adapt their resource management strategies as their needs evolve. To connect resources, resource groups, or subscriptions to a Service Group, you need to create a new Service Group Member Relationship. For more information on service groups, see [Getting started with Service Groups](overview.md).
15-
14+
To connect resources, resource groups, or subscriptions to a Service Group (preview), you need to create a new Service Group Member Relationship. For more information on service groups, see [Getting started with Service Groups](overview.md).
1615

16+
> [!IMPORTANT]
17+
> Azure Service Groups is currently in PREVIEW. For more information about participating in the preview, see [TBD Link]().
18+
> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
1719
1820
## Prerequisites
1921

@@ -26,9 +28,9 @@ Service Groups are designed to be flexible and scalable, allowing organizations
2628
## Create in REST API
2729

2830
For REST API, use the
29-
[Service Groups Member- Create or Update]() endpoint to create a new service group member.
31+
[Service Groups Member- Create or Update]() endpoint to create a new service group member.
3032

31-
In this example, we're connecting a Virtual Machine [VM1] to a Service Group [Contoso].
33+
In this example, we're connecting a Virtual Machine [VM1] to a Service Group [Contoso].
3234

3335
1. Service Group: **groupId** is _Contoso_
3436
1. Virtual Machine: The **resourceID** is _VM1_
@@ -76,19 +78,13 @@ To remove the service group created in this document, use the
7678
- No Request Body
7779

7880

79-
## Next step -or- Related content
81+
## Next step
8082

8183
In this quickstart, you created a service group to help create different views in Azure. The
8284
service group can have member subscriptions, resource groups, resources, or other service groups.
8385

8486
To learn more about service groups and how to manage your service group hierarchy, continue to:
8587

8688
> [!div class="nextstepaction"]
87-
> [Manage your resources with service groups]()
88-
89-
90-
-or-
89+
> [Manage your resources with service groups](manaage-service-groups.md)
9190
92-
- [Related article title](link.md)
93-
- [Related article title](link.md)
94-
- [Related article title](link.md)

articles/governance/service-groups/create-service-group-rest-api.md

Lines changed: 11 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -3,17 +3,19 @@ title: Quickstart: Create a service group with REST API
33
description: In this quickstart, you use REST API to create a service group to organize your resources.
44
author: rthorn17
55
ms.author: rithorn
6-
ms.service: Azure Service Groups
7-
ms.topic: quickstart #Don't change
6+
ms.service: azure-governance
7+
ms.topic: quickstart
88
ms.date: 5/19/2025
99
---
1010

1111

12-
# Quickstart: Create a service group with REST API
12+
# Quickstart: Create a service group (preview) with REST API
1313

14-
Service groups in Azure are a low-privilege-based grouping of resources across subscriptions. They provide a way to manage resources with minimal permissions, ensuring that resources can be grouped and managed without granting excessive access. Service Groups are designed to complement existing organizational structures like Resource Groups, Subscriptions, and Management Groups by offering a flexible and secure way to aggregate resources for specific purposes. For more information on service groups, see [Getting started with Service Groups](overview.md).
15-
14+
With Azure Service Groups (preview) you can create low-privilege-based groupings of resources across subscriptions. They provide a way to manage resources with minimal permissions, ensuring that resources can be grouped and managed without granting excessive access. Service Groups are designed to complement existing organizational structures like Resource Groups, Subscriptions, and Management Groups by offering a flexible and secure way to aggregate resources for specific purposes. For more information on service groups, see [Getting started with Service Groups](overview.md).
1615

16+
> [!IMPORTANT]
17+
> Azure Service Groups is currently in PREVIEW. For more information about participating in the preview, see [TBD Link]().
18+
> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
1719
1820
## Prerequisites
1921

@@ -101,20 +103,7 @@ To remove the service group created in this document, use the
101103

102104
- No Request Body
103105

104-
105-
## Next step -or- Related content
106-
107-
In this quickstart, you created a service group to help create different views in Azure. The
108-
service group can have member subscriptions, resource groups, resources, or other service groups.
109-
110-
To learn more about service groups and how to manage your service group hierarchy, continue to:
111-
112-
> [!div class="nextstepaction"]
113-
> [Manage your resources with service groups]()
114-
115-
116-
-or-
117-
118-
- [Related article title](link.md)
119-
- [Related article title](link.md)
120-
- [Related article title](link.md)
106+
## Related content
107+
* [What are Azure Service Groups?](overview.md)
108+
* [How to: Manage Service Groups](manaage-service-groups.md)
109+
* [Connect service group members with REST API](create-service-group-member-rest-api.md)

articles/governance/service-groups/SGmanage.md renamed to articles/governance/service-groups/manage-service-groups.md

Lines changed: 17 additions & 41 deletions
Original file line numberDiff line numberDiff line change
@@ -1,24 +1,22 @@
11
---
2-
title: Manage Azure Service Groups
3-
description: "Learn how to create, update, read, and delete Azure Service Groups and its members"
2+
title: Manage resouces across subscriptions and resource groups with Azure Service Groups
3+
description: "Learn how to create, update, read, and delete Azure Service Groups and members"
44
author: rthorn17
55
ms.author: rithorn
6-
ms.service: Service Groups
7-
ms.topic: overview #Don't change
6+
ms.service: azure-governance ## is service-groups going to be an official service slug?
7+
ms.topic: how-to
88
ms.date: 05/19/2025
99
---
1010

11-
# How to manage Azure Service Groups?
11+
# How to use Azure Service Groups to manage resources
1212

13-
Service groups in Azure are a low-privilege-based grouping of resources across subscriptions. They provide a way to manage resources with minimal permissions, ensuring that resources can be grouped and managed without granting excessive access. This article helps you learn how to manage Service Groups and its members.
13+
You can group resources, across subscriptions, by creating Azure Service Groups. They provide a way to manage resources with minimal permissions, ensuring that resources can be grouped and managed without granting excessive access. This article helps you learn how to manage Service Groups and its members.
1414

1515
For more information on service groups, see [Getting started with Service Groups](overview.md).
1616

17-
> ![IMPORTANT]
18-
> Service Groups are currently in a Limited Preview state and require Tenant onboarding before trial. To request for onboarding please see [TBD Link]().
19-
>
20-
> This documentation will show how to manage service groups and its members using the Azure portal and REST APIs in the Preview. CLI/ PowerShell/ Terraform support will be announced in a later release.
21-
17+
> [!IMPORTANT]
18+
> Azure Service Groups is currently in PREVIEW. For more information about participating in the preview, see [TBD Link]().
19+
> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
2220
2321

2422
## Service Group Actions
@@ -32,7 +30,7 @@ This section shows you how to manage service group's actions create, read, updat
3230
- API Version: **2024-04-01-preview**
3331
- URL: https://management.azure.com/providers/Microsoft.Management/serviceGroups/[groupID]?api-version=2024-04-01-preview
3432

35-
Request Body:
33+
Request Body:
3634
```json
3735
{
3836
"kind":[kind],
@@ -192,9 +190,9 @@ Service group members are resources, resource groups, or subscriptions that are
192190
|------|-------------------------|--------------------------------|
193191
|Structure| Hierarchical|Flexible and dynamic|
194192
|Inheritance|Yes|No|
195-
|Scope|Service Group property| Extends resources, resource groups, and subscriptions as its own resource|
196-
|Use Case| Governance management | Aggregating resources across different scopes |
197-
|Flexibility| Rigid/Strict (One Parent, Many Children) | Flexible (Many Parents, Many Children)|
193+
|Scope|Service Group property| Extends resources, resource groups, and subscriptions as its own resource|
194+
|Use Case| Governance management | Aggregating resources across different scopes |
195+
|Flexibility| Rigid/Strict (One Parent, Many Children) | Flexible (Many Parents, Many Children)|
198196

199197
### Child/Parent Relationship Using the "Parent" Property
200198

@@ -347,30 +345,8 @@ The valid values are:
347345
* UserExplicitlyCreated: A user created the relationship.
348346

349347

350-
351-
352-
353-
354-
355-
356-
357-
358348
## Related content
359-
360-
- [Related article title](link.md)
361-
- [Related article title](link.md)
362-
- [Related article title](link.md)
363-
364-
<!-- Optional: Related content - H2
365-
366-
Consider including a "Related content" H2 section that
367-
lists links to 1 to 3 articles the user might find helpful.
368-
369-
-->
370-
371-
<!--
372-
373-
Remove all comments except the customer intent
374-
before you sign off or merge to the main branch.
375-
376-
-->
349+
* [What are Azure Service Groups?](overview.md)
350+
* [Quickstart: Create a service group (preview) with REST API](create-service-group-rest-api.md)
351+
* [Quickstart: Connect resources or resource containers to service groups with Service Group Member Relationships](create-service-group-member-rest-api.md)
352+
* [Connect service group members with REST API](create-service-group-member-rest-api.md)

articles/governance/service-groups/overview.md

Lines changed: 23 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -3,33 +3,43 @@ title: "Get started with Service Groups"
33
description: "Learn how to use and manage resources with Service Groups."
44
author: rthorn17
55
ms.author: rithorn
6-
ms.service: Service Groups
7-
ms.topic: concept-article #Don't change
6+
ms.service: governance
7+
ms.topic: overview
88
ms.date: 05/19/2025
99
---
1010

1111
# What are Azure Service Groups?
1212

1313
Service groups in Azure are a low-privilege-based grouping of resources across subscriptions. They provide a way to manage resources with minimal permissions, ensuring that resources can be grouped and managed without granting excessive access. Service Groups are designed to complement existing organizational structures like Resource Groups, Subscriptions, and Management Groups by offering a flexible and secure way to aggregate resources for specific purposes. This article helps give you an overview of what Service Groups are, the scenarios to use them for, and provide guidance on how to get started.
1414

15-
> ![IMPORTANT]
16-
> Service Groups are currently in a Limited Preview state and require Tenant onboarding before trial. To request for onboarding please see [TBD Link]().
15+
> [!IMPORTANT]
16+
> Service Groups is currently in PREVIEW. For more information about participating in the preview, see [TBD Link]().
17+
> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
1718
1819

1920
## Key capabilities
20-
* **Flexible Membership**: Service Groups allow resources from different subscriptions to be grouped together, providing a unified view and management capabilities. They also allow the grouping of subscriptions, resource groups, and resources.
21-
* **Low Privilege Management**: Service Groups are designed to operate with minimal permissions, ensuring that users can manage resources without needing excessive access rights.
22-
* **Multiple Hierarchies**: Service Groups live outside of the resource hierarchy enabling scenarios where the same resources need to be group for different purposes.
21+
- **Multiple Hierarchies**: Service Groups live outside of the resource hierarchy enabling scenarios where the same resources need to be group for different purposes.*
22+
- **Flexible Membership**: Service Groups allow resources from different subscriptions to be grouped together, providing a unified view and management capabilities. They also allow the grouping of subscriptions, resource groups, and resources.
23+
- **Low Privilege Management**: Service Groups are designed to operate with minimal permissions, ensuring that users can manage resources without needing excessive access rights.
2324

2425

26+
### Multiple Hierarchies
27+
The same resources can be connected to many different service groups allowing different customer personas and scenarios to be created and used. With different Role Based Access Controls being assigned to the multiple Service Groups, customers can create many different views that support how they organize their resources.
28+
29+
#### Example Scenarios
30+
* Separate Personas
31+
* An issue that arose frequently when trying to adopt a strict hierarchy was who would own the parent items. With Service Groups, this situation no longer becomes an issue and the different personas can have their own individual views. Customers can use the same resources to be members of a Workload Service Group, a Department Service Group, and a Service Group with all Production resources.
32+
33+
![MultipleSGTree](./media/MultiSG.png)
34+
2535
### Flexible Membership
26-
Within the Resource Hierarchy, there's a limitation of one parent resource container to many children. For example, a resource can only be a member of one resource group or a resource group can only be a member of one subscription. Service Groups introduce a new model that allows a resources or resource containers to have memberships with multiple different Service Groups. The Service Group allows new scenarios where the same resources can be connected to many Service Groups Trees enabling new ways to view your data.
36+
Within the hierarchy of resources, there's a limitation of one parent resource container to many children. For example, a resource can only be a member of one resource group or a resource group can only be a member of one subscription. Service Groups introduce a new model that allows a resources or resource containers to have memberships with multiple different Service Groups. The Service Group allows new scenarios where the same resources can be connected to many Service Groups Trees enabling new ways to view your data.
2737

2838
#### Example Scenarios
2939
* Aggregating Health Metrics
3040
* Organizations with multiple applications and environments can use Service Groups to aggregate health metrics across different environments. Member resources or resource containers could be from various environments within different management groups or subscriptions, can be linked to a single Service Group providing a unified view of health metrics.
3141
* Creating Inventory of a specific resource type
32-
* Customers can connect all Virtual Machines or CosmosDBs to the same Service Groups to get a consolidated view of all the resources of that type in the entire environment. This capability allows a customer like a Virtual Machine Administrator to view aggregated data on all their resources no matter what subscription they live in.
42+
* Customers can connect all Virtual Machines or CosmosDBs to the same Service Groups to get a consolidated view of all the resources of that type in the entire environment. This capability allows a customer like a Virtual Machine Administrator to view aggregated data on all their resources no matter what subscription they live in.
3343

3444
![MGsandSGs](./media/sidebyside.png)
3545

@@ -40,14 +50,6 @@ Service Groups don't have the same inheritance capabilities that other Azure Res
4050
* Aggregating monitoring metrics
4151
* Since Service Groups don't inherit permissions to the members, customers can apply least privileges to assign permissions on the Service Groups that allow viewing of metrics. This capability provides a solution where two users can be assigned access to the same Service Group, but only one is allowed to see certain resources.
4252

43-
### Multiple Hierarchies
44-
The same resources can be connected to many different service groups allowing different customer personas and scenarios to be created and used. With different Role Based Access Controls being assigned to the multiple Service Groups, customers can create many different views that support how they organize their resources.
45-
46-
#### Example Scenarios
47-
* Separate Personas
48-
* An issue that arose frequently when trying to adopt a strict hierarchy was who would own the parent items. With Service Groups, this situation no longer becomes an issue and the different personas can have their own individual views. Customers can use the same resources to be members of a Workload Service Group, a Department Service Group, and a Service Group with all Production resources.
49-
50-
![MultipleSGTree](./media/MultiSG.png)
5153

5254
## How it works
5355
Azure Service Groups are a separate hierarchy grouping resources that don't exist in the resource hierarchy with Resource Groups, Subscriptions, and Management Groups. The separation allows Service Groups to be connected many times to different resources and resource containers without impacting the existing structures.
@@ -97,15 +99,8 @@ Service Groups creates the Root Service Group on the first request received with
9799
Access to the root has to be given from a user with "microsoft.authorization/roleassignments/write" permissions at the tenant level. For example, the Tenant's Global Administrator can elevate their access on the tenant to have these permissions. [Details on elevating Tenant Global Administrator Accesses](https://learn.microsoft.com/en-us/azure/role-based-access-control/elevate-access-global-admin?tabs=azure-portal%2Centra-audit-logs)
98100

99101

100-
## Next step -or- Related content
101-
102-
> [!div class="nextstepaction"]
103-
> [Getting Started: Service Groups](link.md)
104-
105-
-or-
102+
## Related content
103+
* [Quickstart: Create a service group with REST API](service-groups\create-service-group-rest-api.md)
104+
* [How to: Manage Service Groups](manaage-service-groups.md)
105+
* [Connect service group members with REST API](create-service-group-member-rest-api.md)
106106

107-
* [How to: Connect Service Group Members](link.md)
108-
* [How to:](link.md)
109-
* [Related article title](link.md)
110-
* [Service Group REST API Spec]()
111-
* [Service Group Member REST API Spec]()

0 commit comments

Comments
 (0)