Azure CAF Landing Zone - SCHS Organisation
About This Architecture
Azure CAF landing zone hierarchy for SCHS Organisation implements a multi-level management group structure aligned with Cloud Adoption Framework best practices. The Tenant Root Group cascades through SCHS Management Group into specialized management groups: Decommissioned, Platform, Sandbox, and Workload, with HealthyBehaviour as a dedicated workload container. Four environment-specific subscriptions (Development, Test, Pre-Production, Production) under HealthyBehaviour enable controlled promotion through the application lifecycle. This governance model enforces policy consistency, cost tracking, and RBAC delegation across the entire Azure tenant. Fork this diagram to customize management group names, add policy assignments, or adapt the subscription structure for your organisation's compliance and operational requirements.
People also ask
How do I structure Azure management groups and subscriptions following the Cloud Adoption Framework for enterprise governance?
This diagram shows a CAF-aligned landing zone with a Tenant Root Group cascading through SCHS Management Group into specialized management groups (Decommissioned, Platform, Sandbox, Workload) and environment subscriptions (Development, Test, Pre-Production, Production). This structure enforces policy consistency, enables cost tracking per environment, and implements least-privilege RBAC delegation
- Domain:
- Cloud Azure
- Audience:
- Azure cloud architects designing enterprise landing zones and management group hierarchies
Generated by Diagrams.so — AI architecture diagram generator with native Draw.io output. Fork this diagram, remix it, or download as .drawio, PNG, or SVG.