# URL: https://docs.microsoft.com/en-us/azure/governance/management-groups/overview - Provide a [[governance scope]] above subscriptions. - [[Azure subscription]]s are organized into [[Azure management group]]s and governance conditions you apply cascade by inheritance to all associated subscriptions - ALL subscriptions in a single [[Azure management group]] must trust the same [[Azure Active Directory | Azure AD]] tenant. - 10,000 management groups can be supported in a single directory - An [[Azure management group]] tree can support up to six levels of depth (not including the Root level or subscription level) - Each [[Azure management group]] and subscription can only support ONE parent ![[hierarchy of Azure resource groups, subscriptions, and management groups#Management Group Hierarchy]] # [[Azure role-based access control (RBAC)]] ![[Azure RBAC for Management Groups Image.png]]