search

Azure / deployment-stacks

Contains Deployment Stacks CLI scripts and releases
MIT License
89 stars 7 forks source link

MGMT GROUP BEHAVIOR - changes starting ~4/22/24 #156

Closed snarkywolverine closed 2 months ago

snarkywolverine commented 7 months ago

One of the gaps we have identified ahead of our GA release is that Microsoft.Management/managementGroups are not managed by deployment stacks. This means:

(1) Mgmt Groups are not listed as a managed resource, (2) Because of (1), they can not have deny assignments associated with them, (3) Mgmt Gropus cannot be deleted (despite the presence of a deleteManagementGroups option in our API).

We will be addressing (1) and (3) in the coming weeks. On a date TBA, all future deployment stacks which create a management group will be managed by the stack (and show up in the list of managed resources).

As mentioned, the API has support for an 'ActionOnUnmanage' specifically for management groups; however, this is not supported with the current versions of AzCLI or Azure Powershell. This will be addressed in the cmdlets once our service reaches the GA milestone.

Feel free to leave any questions or comments below.

snarkywolverine commented 5 months ago

I have updated the title - we expect items 1 and 3 to be released during the week of April 22. This will impact all API versions.

snarkywolverine commented 2 months ago

Items 1 and 3 have been released to all clouds and all regions. The second item is tracked by #137 .