Feature Request: Single Subscription for Small-Enterprise model

[richardf5]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Is your feature request related to a problem?

Yes.

Describe the solution you'd like

We have many customers who want the 'small enterprise' model whereby the Management, Connectivity and Identity subscription are all in one. This includes our small/mid-market customers.

Their I.T. is simply not that distributed or separated enough to warrant splitting this function up into three separate Subscriptions.

This is currently possible when using the Azure Landing Zone Accelerator Wizard. Under 'Azure Core Setup' you can select either 'Dedicated (recommended)' or 'Single'.

Please see here for more information: https://github.com/Azure/Enterprise-Scale/blob/main/docs/reference/treyresearch/README.md

Additional context
I've tried to find a decent way to do this with the Enterprise Scale Terraform Module. Hoping you have better insight and skills :-)

[jaredfholgate]

Hi @richardf5. This is interesting timing. Checkout this post from @jtracey93: https://www.linkedin.com/feed/update/urn:li:activity:7188826781729087488?updateEntityUrn=urn%3Ali%3Afs_feedUpdate%3A%28V2%2Curn%3Ali%3Aactivity%3A7188826781729087488%29

As it stands, we do support a single subscription. Just supply to same subscription id to all 3 subscription variables. But we may remove that option at a later date per the survey results that Jack posted.

[richardf5]

Afternoon. Thank you for that! - I voted no for the simple reason that the three-subscription model is too complex for small I.T. teams. They don't tend to split these functions when it comes to responsibility.

As it stands, we do support a single subscription. Just supply to same subscription id to all 3 subscription variables. But we may remove that option at a later date per the survey results that Jack posted.

I did try that, but I ended up still with the three Management Groups and associated policy. The last Management Group contained my single subscription, but it:

• Still had the Identity Management Group name.
• Still had distributed policy across the three Management Groups.

Ideally, I'd like a Single Management Group called 'Platform' with all associated policy (that makes sense).

Thank you for all the work on this. It's a brilliant initiative.

[jaredfholgate]

@jtracey93 Any thoughts on this one?

[jtracey93]

Yeah i think this is still a TBC but you can close either this one or #78 as they are the same thing - @jaredfholgate