The policy assigned to the management group cannot take effect during the create subscription process. Is this the design?

Hi txsun

Please confirm whether the new subscription is placed under a management group.

• If yes, verify the policies assigned to that management group these policies will be inherited by the subscription and apply to its resources.
• If no, move the subscription into the appropriate management group to ensure policy inheritance.
• For more details on policy scopes and best practices for managing policies, please refer to the links provided below. reference example of policy assigned at management group scope.

Recommendation: When creating a new subscription, ensure it is created directly under the appropriate Management Group. This ensures that all policies, role-based access controls (RBAC), and governance settings defined at the management group level are automatically inherited by the subscription from the start.

https://learn.microsoft.com/en-us/azure/governance/policy/overview#recommendations-for-managing-policies

https://learn.microsoft.com/en-us/azure/governance/policy/concepts/scope

Feel free to reach out if you have any further concerns. We're here to help you.

If the comment was helpful, please click "Upvote"

Hi txsun
Just want to check if the above Comment worked for you or else please let us know if any help, we are always here to help whenever you need us.

If the comment is helpful, please click "Upvote it"

Thankyou