Region is an area, geographical containing on or more datacenters.

Azure subscription, Logical unit of services linked to account, billing is by subscription, organize access to services.

Azure accounts, account is identity in AD. Types of account, enterprise, resellers, partners, personal. Free, wont be charged before you upgrade.

Cost Management

Pay for what you use, monitor and control spending and also optimize resource use.

Resource tags

Name:Value, Enviroment, Test etc. With tags you can retrieve all resources in the subscription with the name and value for tag. (Many tags, Powershell or CLI)

Cost savings

Pricing calculator


Management groups

If the company has many subscriptions, Management groups provide management on a level over subscription. Organize subscriptions in boxes(containers) and use governance to the groups.


Service for creating, assign and control the use with rules over resources. This forces the resources to stay compliant with standards and SLA



Role-bases access control

RBAC manage who has access to resources, and what action they can do.

RBAC is built on Azure Resource Manger authorization.


Allow access to all resources in a group for an application or user, allow one user to create VM’s and another to to create vnet’s, DBA to manage SQL.

The concepts are

Role definition

Role assignment

Azure RBAC vs Azure AD

Azure RBAC roles control security/permis. to manage Azure resources, Azure AD admin roles controls security/permis. to Azure Active Directory resources.

Nb, subscription admin roles (classic) should not be used if using Azure Resource Manager.

RBAC Roles