Manage subscriptions and RBAC
About this guide
Scenario
To simplify management of Azure resources in your organization, you have been tasked with implementing the following functionality:
- Creating a management group that includes all your Azure subscriptions.
- Granting permissions to submit support requests for all subscriptions in the management group. The permissions should be limited only to:
- Create and manage virtual machines
- Create support request tickets (do not include adding Azure providers)
Job Skills
Task 1: Implement management groups
Task 2: Review and assign a built-in Azure role
Task 3: Create a custom RBAC role
Task 4: Monitor role assignments with the Activity Log
As organizations around the world migrate solutions to the cloud, the ability to implement, manage, and monitor cloud-based solutions is highly valued in numerous industries.
Architecture Diagram
Key Takeaways:
- Management groups are used to logically organize subscriptions.
- The built-in root management group includes all the management groups and subscriptions.
- Azure has many built-in roles. You can assign these roles to control access to resources.
- You can create new roles or customize existing roles.
- Roles are defined in a JSON formatted file and include Actions, NotActions, and AssignableScopes.
- You can use the Activity Log to monitor role assignments.
Career Connections
With the increasing demand for expertise in cloud-based administration, professionals with the skills from this series can pursue job prospects in roles such as Azure Administrator, Cloud Engineer, Systems Administrator (Cloud Focus), DevOps Engineer, and Cloud Support Engineer.
As of 2025, average cloud-related salaries in the United States range from $68,215 for entry-level Azure Administrators to $130,000 for mid-career DevOps Engineers, with Cloud Engineers, Systems Administrators, and Cloud Support Engineers earning competitive pay based on experience and role demands. Please note that these figures are approximate, derived from online sources, and can vary based on factors such as location, industry, and company size.
