A county wants a convenient scope where role assignments and Azure Policy can cover many resource groups at once for a whole workload estate. Which scope often serves that management purpose?
Select an answer to reveal the explanation.
Short Explanation
When you need one place to hang permissions and policy for a big set of related groups, the subscription is the usual hook. You can still go narrower later, but subscription scope covers the estate in one swing.
Full Explanation
Azure role-based access control and Azure Policy can be assigned at several scopes, including management group, subscription, resource group, and resource. The subscription is a frequent practical scope when administrators want consistent access and policy across many resource groups in one estate. Narrower scopes remain available when finer control is required.