Workloads that may talk directly to or from the internet, or that need no virtual network at all, go in this management group. It is a sibling of Corp and Local beneath Landing zones.
Also called Online.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Online management group in context, with comparison tables and the common traps.
Terms in this definition
- VNet
A private network belonging to a single subscription and region and covering all of that region's availability zones. A VM can only use a VNet located in the same region.
- ALL
A DAX function that ignores any filters and gives back every row of a table or every value of the named columns. Used within CALCULATE, it works as a modifier that clears filters, although REMOVEFILTERS states that intent more clearly where it is available.
- Management group
An Azure scope that sits over subscriptions. Policies and role assignments set there flow down to every subscription, resource group and resource it contains.
- LSDOU
The sequence in which Group Policy is processed: the local policy first, followed by site, domain and organisational unit policies. The nearest, last-processed setting takes effect unless Enforced or Block Inheritance alters that.
Related terms
- AppSource
Microsoft's online store for add-ons, including Power BI custom visuals and template apps. Once imported, a visual is added to the Visualizations pane, provided admin settings permit it.
- Azure Architecture Center
Microsoft's online library of Azure architecture: reference designs, solution ideas and design guides, all on Microsoft Learn. It's also where you'll find the deployment options for landing zones and accelerators for workload landing zones.
- Azure Database Migration Service
Azure service for moving whole instances or many databases at once into Azure SQL targets such as SQL Managed Instance, either online or offline.
- Azure Machine Learning
Azure platform where you train, deploy, monitor and retrain models of your own, practising MLOps through tools such as pipelines, online endpoints, model monitoring and prompt flow.
- Azure SQL Migration extension
Azure Data Studio extension, now retired along with that tool in February 2026, that ran online or offline Database Migration Service migrations of databases to SQL Database or SQL Managed Instance. DMS is now driven from the Azure portal, PowerShell or the Azure CLI.
- Cold
Online access tier for blobs that costs less to store than Cool but more to read, while data stays instantly available.
- Confidential Online
A management group in the Sovereign Landing Zone, beneath Landing zones, intended for workloads exposed to the internet that handle highly confidential data. It layers confidential computing controls for encryption in use on top of the Online policies.
- Connected mode
Online licensing option for VCF Operations, and the preferred one: registration with the Business Services console happens over the internet and usage reporting needs no manual steps.