search

research-software-reactor / azure-terminology-cheatsheet

A set of guidance notes and recommendations about subscriptions, security and managing application deployment
0 stars 0 forks source link

Resource group or subscription? #2

Open callaghanmt opened 5 years ago

callaghanmt commented 5 years ago

Should research groups/ RSE teams be given allocated a subscription or a resource group? Are there advantages or disadvantages with each approach?

callaghanmt commented 5 years ago

Resource groups are very restrictive and although they might be the answer for simple projects, there are not the solution for complex projects. Particularly, they don't play nicely with Service Principals and Application Principals which many services require to themselves create resource. For example, CycleCloud is actually an orchestrator which creates resource itself. It needs to be given a Service Principal with the correct access roles to dynamically spin-up resources.

callaghanmt commented 5 years ago

The most flexible approach is to allocate subscriptions at the appropriate level within the organisation. This can be used in conjunction with Education Portal to manage allocating resource at a school/ course/ module level.