The top-level management group in every tenant. Assigning a policy or role at this level affects all subscriptions.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Tenant Root Group in context, with comparison tables and the common traps.
Terms in this definition
- Management group
An Azure scope that sits over subscriptions. Policies and role assignments set there flow down to every subscription, resource group and resource it contains.
- Tenant
A trusted, dedicated Microsoft Entra ID instance that stores the users, groups and app registrations of one organisation. A subscription trusts only a single tenant, although a tenant can be trusted by several subscriptions.
- Exclusions
Scopes taken out of a policy assignment; they can only narrow its coverage, never widen it.
- Role
How an actor normally or expectedly behaves, or the part a person takes in a process. A single actor may hold more than one role.
- ALL
A DAX function that ignores any filters and gives back every row of a table or every value of the named columns. Used within CALCULATE, it works as a modifier that clears filters, although REMOVEFILTERS states that intent more clearly where it is available.