You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/governance/service-groups/create-service-group-member-rest-api.md
+11-15Lines changed: 11 additions & 15 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,19 +1,21 @@
1
1
---
2
-
title: Quickstart: Connect service group members with REST API
2
+
title: "Quickstart: Connect Service Group members using the REST API"
3
3
description: In this quickstart, you use REST API to connect a resource to a service group with a service group member relationship.
4
4
author: rthorn17
5
5
ms.author: rithorn
6
-
ms.service: Azure Service Groups
7
-
ms.topic: quickstart#Don't change
6
+
ms.service: azure-governance
7
+
ms.topic: quickstart
8
8
ms.date: 5/19/2025
9
9
---
10
10
11
11
12
12
# Quickstart: Connect resources or resource containers to service groups with Service Group Member Relationships
13
13
14
-
Service Groups are designed to be flexible and scalable, allowing organizations to adapt their resource management strategies as their needs evolve. To connect resources, resource groups, or subscriptions to a Service Group, you need to create a new Service Group Member Relationship. For more information on service groups, see [Getting started with Service Groups](overview.md).
15
-
14
+
To connect resources, resource groups, or subscriptions to a Service Group (preview), you need to create a new Service Group Member Relationship. For more information on service groups, see [Getting started with Service Groups](overview.md).
16
15
16
+
> [!IMPORTANT]
17
+
> Azure Service Groups is currently in PREVIEW. For more information about participating in the preview, see [TBD Link]().
18
+
> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
17
19
18
20
## Prerequisites
19
21
@@ -26,9 +28,9 @@ Service Groups are designed to be flexible and scalable, allowing organizations
26
28
## Create in REST API
27
29
28
30
For REST API, use the
29
-
[Service Groups Member- Create or Update]() endpoint to create a new service group member.
31
+
[Service Groups Member- Create or Update]() endpoint to create a new service group member.
30
32
31
-
In this example, we're connecting a Virtual Machine [VM1] to a Service Group [Contoso].
33
+
In this example, we're connecting a Virtual Machine [VM1] to a Service Group [Contoso].
32
34
33
35
1. Service Group: **groupId** is _Contoso_
34
36
1. Virtual Machine: The **resourceID** is _VM1_
@@ -76,19 +78,13 @@ To remove the service group created in this document, use the
76
78
- No Request Body
77
79
78
80
79
-
## Next step -or- Related content
81
+
## Next step
80
82
81
83
In this quickstart, you created a service group to help create different views in Azure. The
82
84
service group can have member subscriptions, resource groups, resources, or other service groups.
83
85
84
86
To learn more about service groups and how to manage your service group hierarchy, continue to:
85
87
86
88
> [!div class="nextstepaction"]
87
-
> [Manage your resources with service groups]()
88
-
89
-
90
-
-or-
89
+
> [Manage your resources with service groups](manaage-service-groups.md)
Copy file name to clipboardExpand all lines: articles/governance/service-groups/create-service-group-rest-api.md
+11-22Lines changed: 11 additions & 22 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,17 +3,19 @@ title: Quickstart: Create a service group with REST API
3
3
description: In this quickstart, you use REST API to create a service group to organize your resources.
4
4
author: rthorn17
5
5
ms.author: rithorn
6
-
ms.service: Azure Service Groups
7
-
ms.topic: quickstart #Don't change
6
+
ms.service: azure-governance
7
+
ms.topic: quickstart
8
8
ms.date: 5/19/2025
9
9
---
10
10
11
11
12
-
# Quickstart: Create a service group with REST API
12
+
# Quickstart: Create a service group (preview) with REST API
13
13
14
-
Service groups in Azure are a low-privilege-based grouping of resources across subscriptions. They provide a way to manage resources with minimal permissions, ensuring that resources can be grouped and managed without granting excessive access. Service Groups are designed to complement existing organizational structures like Resource Groups, Subscriptions, and Management Groups by offering a flexible and secure way to aggregate resources for specific purposes. For more information on service groups, see [Getting started with Service Groups](overview.md).
15
-
14
+
With Azure Service Groups (preview) you can create low-privilege-based groupings of resources across subscriptions. They provide a way to manage resources with minimal permissions, ensuring that resources can be grouped and managed without granting excessive access. Service Groups are designed to complement existing organizational structures like Resource Groups, Subscriptions, and Management Groups by offering a flexible and secure way to aggregate resources for specific purposes. For more information on service groups, see [Getting started with Service Groups](overview.md).
16
15
16
+
> [!IMPORTANT]
17
+
> Azure Service Groups is currently in PREVIEW. For more information about participating in the preview, see [TBD Link]().
18
+
> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
17
19
18
20
## Prerequisites
19
21
@@ -101,20 +103,7 @@ To remove the service group created in this document, use the
101
103
102
104
- No Request Body
103
105
104
-
105
-
## Next step -or- Related content
106
-
107
-
In this quickstart, you created a service group to help create different views in Azure. The
108
-
service group can have member subscriptions, resource groups, resources, or other service groups.
109
-
110
-
To learn more about service groups and how to manage your service group hierarchy, continue to:
111
-
112
-
> [!div class="nextstepaction"]
113
-
> [Manage your resources with service groups]()
114
-
115
-
116
-
-or-
117
-
118
-
-[Related article title](link.md)
119
-
-[Related article title](link.md)
120
-
-[Related article title](link.md)
106
+
## Related content
107
+
*[What are Azure Service Groups?](overview.md)
108
+
*[How to: Manage Service Groups](manaage-service-groups.md)
109
+
*[Connect service group members with REST API](create-service-group-member-rest-api.md)
Copy file name to clipboardExpand all lines: articles/governance/service-groups/manage-service-groups.md
+17-41Lines changed: 17 additions & 41 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,24 +1,22 @@
1
1
---
2
-
title: Manage Azure Service Groups
3
-
description: "Learn how to create, update, read, and delete Azure Service Groups and its members"
2
+
title: Manage resouces across subscriptions and resource groups with Azure Service Groups
3
+
description: "Learn how to create, update, read, and delete Azure Service Groups and members"
4
4
author: rthorn17
5
5
ms.author: rithorn
6
-
ms.service: Service Groups
7
-
ms.topic: overview #Don't change
6
+
ms.service: azure-governance ## is service-groups going to be an official service slug?
7
+
ms.topic: how-to
8
8
ms.date: 05/19/2025
9
9
---
10
10
11
-
# How to manage Azure Service Groups?
11
+
# How to use Azure Service Groups to manage resources
12
12
13
-
Service groups in Azure are a low-privilege-based grouping of resources across subscriptions. They provide a way to manage resources with minimal permissions, ensuring that resources can be grouped and managed without granting excessive access. This article helps you learn how to manage Service Groups and its members.
13
+
You can group resources, across subscriptions, by creating Azure Service Groups. They provide a way to manage resources with minimal permissions, ensuring that resources can be grouped and managed without granting excessive access. This article helps you learn how to manage Service Groups and its members.
14
14
15
15
For more information on service groups, see [Getting started with Service Groups](overview.md).
16
16
17
-
> ![IMPORTANT]
18
-
> Service Groups are currently in a Limited Preview state and require Tenant onboarding before trial. To request for onboarding please see [TBD Link]().
19
-
>
20
-
> This documentation will show how to manage service groups and its members using the Azure portal and REST APIs in the Preview. CLI/ PowerShell/ Terraform support will be announced in a later release.
21
-
17
+
> [!IMPORTANT]
18
+
> Azure Service Groups is currently in PREVIEW. For more information about participating in the preview, see [TBD Link]().
19
+
> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
22
20
23
21
24
22
## Service Group Actions
@@ -32,7 +30,7 @@ This section shows you how to manage service group's actions create, read, updat
|Scope|Service Group property|Extends resources, resource groups, and subscriptions as its own resource|
196
-
|Use Case|Governance management |Aggregating resources across different scopes |
197
-
|Flexibility| Rigid/Strict (One Parent, Many Children) |Flexible (Many Parents, Many Children)|
193
+
|Scope|Service Group property|Extends resources, resource groups, and subscriptions as its own resource|
194
+
|Use Case|Governance management |Aggregating resources across different scopes |
195
+
|Flexibility| Rigid/Strict (One Parent, Many Children) |Flexible (Many Parents, Many Children)|
198
196
199
197
### Child/Parent Relationship Using the "Parent" Property
200
198
@@ -347,30 +345,8 @@ The valid values are:
347
345
* UserExplicitlyCreated: A user created the relationship.
348
346
349
347
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
348
## Related content
359
-
360
-
-[Related article title](link.md)
361
-
-[Related article title](link.md)
362
-
-[Related article title](link.md)
363
-
364
-
<!-- Optional: Related content - H2
365
-
366
-
Consider including a "Related content" H2 section that
367
-
lists links to 1 to 3 articles the user might find helpful.
368
-
369
-
-->
370
-
371
-
<!--
372
-
373
-
Remove all comments except the customer intent
374
-
before you sign off or merge to the main branch.
375
-
376
-
-->
349
+
*[What are Azure Service Groups?](overview.md)
350
+
*[Quickstart: Create a service group (preview) with REST API](create-service-group-rest-api.md)
351
+
*[Quickstart: Connect resources or resource containers to service groups with Service Group Member Relationships](create-service-group-member-rest-api.md)
352
+
*[Connect service group members with REST API](create-service-group-member-rest-api.md)
Copy file name to clipboardExpand all lines: articles/governance/service-groups/overview.md
+23-28Lines changed: 23 additions & 28 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -3,33 +3,43 @@ title: "Get started with Service Groups"
3
3
description: "Learn how to use and manage resources with Service Groups."
4
4
author: rthorn17
5
5
ms.author: rithorn
6
-
ms.service: Service Groups
7
-
ms.topic: concept-article #Don't change
6
+
ms.service: governance
7
+
ms.topic: overview
8
8
ms.date: 05/19/2025
9
9
---
10
10
11
11
# What are Azure Service Groups?
12
12
13
13
Service groups in Azure are a low-privilege-based grouping of resources across subscriptions. They provide a way to manage resources with minimal permissions, ensuring that resources can be grouped and managed without granting excessive access. Service Groups are designed to complement existing organizational structures like Resource Groups, Subscriptions, and Management Groups by offering a flexible and secure way to aggregate resources for specific purposes. This article helps give you an overview of what Service Groups are, the scenarios to use them for, and provide guidance on how to get started.
14
14
15
-
> ![IMPORTANT]
16
-
> Service Groups are currently in a Limited Preview state and require Tenant onboarding before trial. To request for onboarding please see [TBD Link]().
15
+
> [!IMPORTANT]
16
+
> Service Groups is currently in PREVIEW. For more information about participating in the preview, see [TBD Link]().
17
+
> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
17
18
18
19
19
20
## Key capabilities
20
-
***Flexible Membership**: Service Groups allow resources from different subscriptions to be grouped together, providing a unified view and management capabilities. They also allow the grouping of subscriptions, resource groups, and resources.
21
-
***Low Privilege Management**: Service Groups are designed to operate with minimal permissions, ensuring that users can manage resources without needing excessive access rights.
22
-
***Multiple Hierarchies**: Service Groups live outside of the resource hierarchy enabling scenarios where the same resources need to be group for different purposes.
21
+
-**Multiple Hierarchies**: Service Groups live outside of the resource hierarchy enabling scenarios where the same resources need to be group for different purposes.*
22
+
-**Flexible Membership**: Service Groups allow resources from different subscriptions to be grouped together, providing a unified view and management capabilities. They also allow the grouping of subscriptions, resource groups, and resources.
23
+
-**Low Privilege Management**: Service Groups are designed to operate with minimal permissions, ensuring that users can manage resources without needing excessive access rights.
23
24
24
25
26
+
### Multiple Hierarchies
27
+
The same resources can be connected to many different service groups allowing different customer personas and scenarios to be created and used. With different Role Based Access Controls being assigned to the multiple Service Groups, customers can create many different views that support how they organize their resources.
28
+
29
+
#### Example Scenarios
30
+
* Separate Personas
31
+
* An issue that arose frequently when trying to adopt a strict hierarchy was who would own the parent items. With Service Groups, this situation no longer becomes an issue and the different personas can have their own individual views. Customers can use the same resources to be members of a Workload Service Group, a Department Service Group, and a Service Group with all Production resources.
32
+
33
+

34
+
25
35
### Flexible Membership
26
-
Within the Resource Hierarchy, there's a limitation of one parent resource container to many children. For example, a resource can only be a member of one resource group or a resource group can only be a member of one subscription. Service Groups introduce a new model that allows a resources or resource containers to have memberships with multiple different Service Groups. The Service Group allows new scenarios where the same resources can be connected to many Service Groups Trees enabling new ways to view your data.
36
+
Within the hierarchy of resources, there's a limitation of one parent resource container to many children. For example, a resource can only be a member of one resource group or a resource group can only be a member of one subscription. Service Groups introduce a new model that allows a resources or resource containers to have memberships with multiple different Service Groups. The Service Group allows new scenarios where the same resources can be connected to many Service Groups Trees enabling new ways to view your data.
27
37
28
38
#### Example Scenarios
29
39
* Aggregating Health Metrics
30
40
* Organizations with multiple applications and environments can use Service Groups to aggregate health metrics across different environments. Member resources or resource containers could be from various environments within different management groups or subscriptions, can be linked to a single Service Group providing a unified view of health metrics.
31
41
* Creating Inventory of a specific resource type
32
-
* Customers can connect all Virtual Machines or CosmosDBs to the same Service Groups to get a consolidated view of all the resources of that type in the entire environment. This capability allows a customer like a Virtual Machine Administrator to view aggregated data on all their resources no matter what subscription they live in.
42
+
* Customers can connect all Virtual Machines or CosmosDBs to the same Service Groups to get a consolidated view of all the resources of that type in the entire environment. This capability allows a customer like a Virtual Machine Administrator to view aggregated data on all their resources no matter what subscription they live in.
33
43
34
44

35
45
@@ -40,14 +50,6 @@ Service Groups don't have the same inheritance capabilities that other Azure Res
40
50
* Aggregating monitoring metrics
41
51
* Since Service Groups don't inherit permissions to the members, customers can apply least privileges to assign permissions on the Service Groups that allow viewing of metrics. This capability provides a solution where two users can be assigned access to the same Service Group, but only one is allowed to see certain resources.
42
52
43
-
### Multiple Hierarchies
44
-
The same resources can be connected to many different service groups allowing different customer personas and scenarios to be created and used. With different Role Based Access Controls being assigned to the multiple Service Groups, customers can create many different views that support how they organize their resources.
45
-
46
-
#### Example Scenarios
47
-
* Separate Personas
48
-
* An issue that arose frequently when trying to adopt a strict hierarchy was who would own the parent items. With Service Groups, this situation no longer becomes an issue and the different personas can have their own individual views. Customers can use the same resources to be members of a Workload Service Group, a Department Service Group, and a Service Group with all Production resources.
49
-
50
-

51
53
52
54
## How it works
53
55
Azure Service Groups are a separate hierarchy grouping resources that don't exist in the resource hierarchy with Resource Groups, Subscriptions, and Management Groups. The separation allows Service Groups to be connected many times to different resources and resource containers without impacting the existing structures.
@@ -97,15 +99,8 @@ Service Groups creates the Root Service Group on the first request received with
97
99
Access to the root has to be given from a user with "microsoft.authorization/roleassignments/write" permissions at the tenant level. For example, the Tenant's Global Administrator can elevate their access on the tenant to have these permissions. [Details on elevating Tenant Global Administrator Accesses](https://learn.microsoft.com/en-us/azure/role-based-access-control/elevate-access-global-admin?tabs=azure-portal%2Centra-audit-logs)
98
100
99
101
100
-
## Next step -or- Related content
101
-
102
-
> [!div class="nextstepaction"]
103
-
> [Getting Started: Service Groups](link.md)
104
-
105
-
-or-
102
+
## Related content
103
+
*[Quickstart: Create a service group with REST API](service-groups\create-service-group-rest-api.md)
104
+
*[How to: Manage Service Groups](manaage-service-groups.md)
105
+
*[Connect service group members with REST API](create-service-group-member-rest-api.md)
0 commit comments