What is the Management group access? If your organization has many Azure subscriptions, you may need a way to efficiently manage access, policies, and compliance for those subscription. Management groups provide a governance scope above subscriptions. you organize subscriptions in to management groups; the governance conditions you apply cascade by inheritance to all associated subscriptions. Management groups give you enterprise - grade management at scale, no matter what type of subscription you might have. However, all subscription with a single management group must trust the same Azure Active Directory (azure AD) Tennant. For Example: You can apply policies to a management group that limits the regions available for virtual machine (VM) creation. This policy would be applied to all rested management groups , subscriptions and resources and allow VM creation only in authorized regions.