Question

What type of additional AZ subscription should you make if you need to limit a team to a lower cost resource, while allowing the IT department a full range. You need to manage and control access to the resources that users provision with each subscription.

Answer 1

Create an Azure subscription with resource policies, use Azure Resource Manager for governance control, and manage access with role-based access control (RBAC) to limit costs for some teams while giving IT full range.

Step-by-step explanation:

Manage access to an Azure subscription by using Azure role-based access control (Azure RBAC) To grant access to a subscription, identify the appropriate role to assign to an employee. Understand when you might need to temporarily elevate your own access to regain access to a subscription.

If you need to limit a team to a lower cost resource while allowing the IT department a full range, you would typically create an additional Azure subscription with specific resource policies. Azure allows you to create multiple subscriptions under a single Azure tenant, and you can apply different access permissions and policies to each subscription.

You can use Azure Resource Manager to apply governance controls by defining policies and restrictions for resources, ensuring that users only provision resources that align with your budget and compliance needs. By implementing Azure's role-based access control (RBAC), you can manage and control access effectively, assigning the IT department broader permissions while limiting other teams accordingly.