Azure-docs: Any user is able to create a managemnt group under the Root Management group

[frehnejc]

Is this by design that any user is able to create a new management group under the Root Management Group?

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 1527b80e-5270-b5f0-9034-747c6f92ae4e
• Version Independent ID: 50b9882c-dcb0-ecc1-241b-1361ad2fff1e
• Content: Organize your resources with Azure management groups - Azure Governance
• Content Source: articles/governance/management-groups/index.md
• Service: governance
• GitHub Login: @rthorn17
• Microsoft Alias: rithorn

[KrishnaG-MSFT]

@frehnejc Thanks for the comment. We are actively investigating on the issue and will get back to you shortly with an update.

[rthorn17]

@frehnejc - This is by design. We wanted to allow the freedom to all users and a minimal on-boarding process. Our authorization and controls focus on moving the management groups to see if you have access. With that said we are evaluating the current model with feedback from customers and one feature we are looking to do is have a setting on the Root Management Group that would allow an admin the ability to turn on/off the ability for everyone to create MGs by default. I would love to hear and feedback you have.

[KrishnaG-MSFT]

@rthorn17 Thanks for the quick response. 👍
@frehnejc At this point it appears that there's no edits or updates needed for the documentation. Closing this issue for now. If there are further questions regarding this matter or feedback on the documentation, please do let us know and we will gladly continue the discussion.