💼 5.8 Ensure the default management group for new subscriptions is not the root management group (Automated)
- ID:
/frameworks/cis-azure-v7.0.0/05/08
Stats
not available
Description
A tenant places each new subscription under one of two scopes: the root management group, or another management group the organization designates. The Default management group hierarchy setting selects between them for the whole tenant. Prerequisites: Create the management group that will receive new subscriptions and assign it the policies and role assignments that new subscriptions must carry.
Similar
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|
Policies (1)
| Policy | Logic Count | Flags | Compliance |
|---|---|---|---|
| 🛡️ Azure Tenant default management group is the root group🟢⚪ | 🟢 x2, ⚪ x1 | no data |