Microsoft Azure introduces Service Groups and Policy enhancements

Microsoft is expanding its Azure governance and organizational capabilities through Azure Policy and the introduction of Azure Service Groups, currently in public preview.

Azure Policy serves as an enforcement engine for governance models, allowing organizations to encode standards through code. It offers various effects, including Audit for marking non-compliant resources, Deny to block non-compliant creations, Modify to fix properties during creation, DeployIfNotExists for creating companion resources, and Disabled for temporary policy parking.

To address gaps between governance and operations, Azure Service Groups provide a new logical layer for organizing resources. Unlike traditional Management Groups, Service Groups act as virtual folders that can group resources across multiple subscriptions, resource groups, regions, and landing zones without physically moving them. This allows a single resource to belong to multiple groups simultaneously, facilitating better workload ownership, cost management, and resilience planning without altering the existing hierarchy.