Microsoft Azure Management Group Test

For large organization with multiple Microsoft Azure subscriptions, it becomes increasingly difficult to manage the role based access, enforce organization level IT policies and ensure compliance across the subscriptions. The Management groups provide to manage all of above across a number of subscriptions, define and cascade the policies and enforce compliance. Given the important role that Azure Management groups play in organizing the access and policies it is vital for any organization to get it right.

This test monitor the management groups and report the metrics like number of management groups and number of subscriptions, which help administrators determine if there are any new management groups and subscription ids which need to be taken under root hierarchy.

Target of the test : A Microsoft Azure Management Group

Agent deploying the test : An external agent

Outputs of the test : One set of results for the target Management Group

Configurable parameters for the test
Parameters	Description
Test Period	How often should the test be executed.
Host	The host for which the test is to be configured.
Subscription ID	Specify the GUID which uniquely identifies the Microsoft Azure Subscription to be monitored. To know the ID that maps to the target subscription, do the following: Login to the Microsoft Azure Portal. When the portal opens, click on the Subscriptions option (as indicated by Figure 1). Figure 1 : Clicking on the Subscriptions option Figure 2 that appears next will list all the subscriptions that have been configured for the target Azure AD tenant. Locate the subscription that is being monitored in the list, and check the value displayed for that subscription in the Subscription ID column. Figure 2 : Determining the Subscription ID Copy the Subscription ID in Figure 2 to the text box corresponding to the SUBSCRIPTION ID parameter in the test configuration page.
Tenant ID	Specify the Directory ID of the Azure AD tenant to which the target subscription belongs. To know how to determine the Directory ID, refer to Configuring the eG Agent to Monitor Microsoft Azure section in Monitoring Microsoft Azure Subscription document.
Client ID, Client Password and Confirm Password	The eG agent communicates with the target Microsoft Load Balancers using Java API calls. To collect the required metrics, the eG agent requires an Access token in the form of an Application ID and the client secret value. To know how to determine the Application ID and the key, refer to Configuring the eG Agent to Monitor Microsoft Azure section in Monitoring Microsoft Azure Subscription document. Specify the Application ID of the created Application in the Client ID text box and the client secret value in the Client Password text box. Then, confirm the password by retyping it in the Confirm Password text box.
Proxy Host	In some environments, all communication with the Azure could be routed through a proxy server. In such environments, you should make sure that the eG agent connects to the cloud via the proxy server and collects metrics. To enable metrics collection via a proxy, specify the IP address of the proxy server and the port at which the server listens against the Proxy Host and Proxy Port parameters. By default, these parameters are set to none, indicating that the eG agent is not configured to communicate via a proxy, by default.
Proxy Username, Proxy Password and Confirm Password	If the proxy server requires authentication, then, specify a valid proxy user name and password in the Proxy Username and Proxy Password parameters, respectively. Then, confirm the password by retyping it in the Confirm Password text box.
Detailed Diagnosis	To make diagnosis more efficient and accurate, the eG Enterprise embeds an optional detailed diagnostic capability. With this capability, the eG agents can be configured to run detailed, more elaborate tests as and when specific problems are detected. To enable the detailed diagnosis capability of this test for a particular server, choose the On option. To disable the capability, click on the Off option. The option to selectively enable/disable the detailed diagnosis capability will be available only if the following conditions are fulfilled: The eG manager license should allow the detailed diagnosis capability Both the normal and abnormal frequencies configured for the detailed diagnosis measures should not be 0.

Measurements made by the test
Measurement	Description	Measurement Unit	Interpretation
Number of subscription	Indicates the total number of subscriptions under the current root management group.	Number	You need to ensure the number of subscriptions is manageable and the subscriptions are all used. The detailed diagnosis of this measure reveal below metrics: Type Subscription ID Subscription name Immediate parent management group Id Immediate parent management group name All parent management group name chain
Number of management groups	Indicates the total number of management groups under the current root management group.	Number	You need to ensure the number of subscriptions is manageable and the subscriptions are all used. The detailed diagnosis of this measure reveal below metrics: Type Management group ID Management group name Immediate parent management group Id Immediate parent management group name All parent management group name chain Depth level from root.