Search Azure terms

Management and Governance premium Azure Lighthouse Azure Lighthouse enables secure delegated management of Azure resources across customer tenants, supporting service providers and central teams with scalable cross-tenant governance. Delegated resource management advanced 5 commands Aliases: Lighthouse, delegated resource management, Microsoft Managed Services delegation Quick peek Open full term page

Analytics premium Databricks managed resource group The Azure resource group created or referenced for Databricks-managed infrastructure that supports a workspace and its classic compute resources. Azure Databricks intermediate 6 commands Aliases: managed resource group, Azure Databricks managed resource group, workspace managed resource group Quick peek Open full term page

Management and Governance premium Extension resource An Extension resource is an Azure Resource Manager resource that adds capabilities to another resource, such as a lock, role assignment, policy assignment, or diagnostic setting. Teams use it to attach governance, access, diagnostics, locks, policies, or configuration behavior to an existing Azure resource or scope without treating the extension as a standalone workload. It is not a child resource that only exists inside a parent namespace, a deployment script, a VM extension package, or proof that the target resource is configured correctly. Azure Resource Manager intermediate 6 commands Aliases: ARM extension resource, resource extension, scope extension resource Quick peek Open full term page

Monitoring and Observability premium Azure Resource Health Azure Resource Health reports current and past health for individual Azure resources and helps diagnose service-impacting problems. Operational hygiene fundamentals 5 commands Aliases: Azure Resource Health, Azure resource health status, Resource Health, resource availability status Quick peek Open full term page

Management and Governance premium Bicep existing resource A Bicep existing resource declaration references a resource that already exists instead of deploying it again. Bicep fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium Foundry resource A Foundry resource is the primary Azure resource for building, deploying, and managing generative AI models, agents, evaluations, and applications. Microsoft Foundry intermediate 5 commands Aliases: Microsoft Foundry resource, Foundry AIServices resource, AI Services Foundry resource Quick peek Open full term page

Management and Governance premium Parent management group A parent management group is the branch above a child management group or subscription. Rules assigned at the parent can flow downward, so changing the parent is a broad governance decision, not just a local label change. Management groups fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Resource group A resource group is an Azure Resource Manager container that holds related resources for a solution. Azure scope fundamentals 5 commands Aliases: RG, Azure resource group Quick peek Open full term page

Management and Governance premium Resource group scope Resource group scope means the command, deployment, policy, or role assignment targets one resource group. It is narrower than subscription scope and broader than a single resource, making it a common boundary for application environments and team ownership. Management scopes intermediate 5 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Resource provider Microsoft Learn defines an Azure resource provider as a set of REST operations that supports functionality for a specific Azure service. The provider namespace, such as Microsoft.Storage or Microsoft.Compute, owns resource types, API versions, supported locations, operations, and registration state used by Azure Resource Manager. Azure Resource Manager fundamentals 5 commands Aliases: Azure resource provider, provider namespace, ARM provider Quick peek Open full term page

Management and Governance premium Root management group The root management group is the top of the Azure governance tree for a tenant. Because everything sits beneath it, policies or access assigned there can have very wide impact. Treat root-scope changes as enterprise-level decisions. Management groups intermediate 5 commands Aliases: tenant root group Quick peek Open full term page

Integration premium API Management operation An API Management operation is one callable action inside an API, such as GET /orders or POST /claims. It tells Azure API Management which HTTP method, URL template, parameters, and display name should be exposed to consumers. The operation can map to a backend route, return a mock response, accept. Application delivery and API edge intermediate 4 commands Aliases: APIM operation, API operation in API Management Quick peek Open full term page

Integration premium API Management revision An API Management revision is a safe working copy of an API for changes that should not break consumers. You create a revision, adjust operations, descriptions, policies, or backend settings, test the changes, and then make that revision current when it is ready. Existing consumers keep using the. Application delivery and API edge intermediate 4 commands Aliases: APIM revision, API revision Quick peek Open full term page

Integration premium API Management self-hosted gateway An API Management self-hosted gateway is a containerized copy of the API Management gateway that runs where your APIs live, such as on-premises, another cloud, or an Azure Kubernetes environment. Azure API Management remains the place where teams define APIs, products, policies, and observability.. Application delivery and API edge intermediate 4 commands Aliases: APIM self-hosted gateway, self-hosted API gateway Quick peek Open full term page

Integration premium API Management version An API Management version is a separate version of an API that helps teams handle breaking changes. Clients can keep using an older version while newer clients adopt the new version when ready. Versions can be identified through a path, header, or query parameter, depending on the versioning. Application delivery and API edge intermediate 4 commands Aliases: APIM version, API version in API Management Quick peek Open full term page

Management and Governance premium Azure Resource Graph Azure Resource Graph is the fast inventory search engine for Azure resources. Microsoft Learn anchors this term in What is Azure Resource Graph?, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended. In field use, start with the technical boundary: Technically, Azure Resource Graph extends Azure Resource Management by maintaining queryable resource data across the subscriptions available to the signed-in. Fleet discovery fundamentals 4 commands Aliases: ARG Quick peek Open full term page

Management and Governance premium Bicep conditional resource A Bicep conditional resource is a resource or module declaration that deploys only when its if expression evaluates to true. Bicep fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Bicep resource declaration A Bicep resource declaration uses the resource keyword, a symbolic name, a resource type and API version, and resource properties. Bicep fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Child management group A child management group is a branch under a parent management group. It helps organize subscriptions into smaller governance areas, while still inheriting broad rules from above. Use it when one tenant needs different policy or access boundaries for teams, business units, or environments. Management groups fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Identity premium Entitlement management Entitlement management uses access packages to govern access to groups, applications, SharePoint sites, and other resources for internal and external identities. Identity Governance intermediate 4 commands Aliases: Microsoft Entra entitlement management, Entra entitlement management, access package governance Quick peek Open full term page

Management and Governance premium Global resource Global resource is an Azure resource or service configuration whose behavior is global or nonregional instead of being deployed as a normal workload in one Azure region. Teams use it to understand why resources such as Azure Front Door, DNS-related services, or tenant-level identity features do not behave like regional compute or storage resources. In daily Azure work, it shows up when engineers choose a resource group location for metadata, design global routing, review service availability, explain compliance scope, or troubleshoot why a regional outage affects dependencies differently. Azure Resource Manager intermediate 4 commands Aliases: nonregional Azure resource, global Azure resource, Azure global service resource Quick peek Open full term page

Management and Governance premium Management group hierarchy A management group hierarchy is the tree that organizes an Azure estate. Subscriptions can sit under management groups, management groups can sit under parents, and broad policy or access settings can flow down from higher branches to lower ones. Management groups intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Management group ID A management group ID is the stable name Azure tools use for a management group. The display name can be friendly, but the ID is what CLI commands, resource IDs, and policy assignments need when they target that governance scope. Management groups fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Management group scope Management group scope means the operation targets a branch of the Azure hierarchy, not just one subscription. It is useful for organization-wide policy, access, and landing-zone governance, but mistakes can affect many subscriptions at once. Management scopes intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Resource Graph query A Resource Graph query is a fast way to ask, “What resources do we have?” across subscriptions. It is useful for inventory, governance, cleanup, tagging checks, security investigations, and finding patterns that would be painful to inspect one resource at a time. Resource Graph intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Resource location Resource location is the region tied to a resource. For many services it is where the workload runs; for some global resources it may be where metadata is stored. Either way, location affects compliance, capacity, latency, and availability planning. Azure Resource Manager fundamentals 4 commands Aliases: Azure resource location Quick peek Open full term page

Management and Governance premium Resource provider operation A resource provider operation is the permission-style action string behind Azure RBAC. It describes what can be done, such as Microsoft.Storage/storageAccounts/read or Microsoft.Compute/virtualMachines/write. If access fails, these operations often explain what permission is missing. Resource providers fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Resource scope Resource scope means you are targeting one specific Azure resource. It is the narrowest common scope, useful when access, locks, monitoring, or troubleshooting should affect only that object instead of everything in a resource group or subscription. Management scopes fundamentals 4 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Resource type Resource type tells Azure what kind of object you are working with. A storage account, virtual machine, and virtual network each has a provider/type string. That string controls which API, permissions, properties, and deployment rules apply. Resource providers intermediate 4 commands Aliases: No aliases yet Quick peek Open full term page

AI and Machine Learning premium AI services resource An AI services resource is the Azure resource, commonly Microsoft.CognitiveServices/accounts with kind AIServices, that provides the governance scope for AI service access, networking, billing, monitoring, keys, endpoints, model deployments, projects, and related configuration. Azure AI services fundamentals 3 commands Aliases: Azure AI services resource, Foundry resource, AIServices resource, Cognitive Services account Quick peek Open full term page

Management and Governance premium Allowed resource types policy An allowed resource types policy is an Azure Policy definition that lets an organization specify which Azure resource types can be deployed, reducing uncontrolled services, complexity, cost risk, and attack surface. Azure Policy fundamentals 3 commands Aliases: Allowed resource types, resource type allowlist policy, allowed types policy Quick peek Open full term page

Management and Governance premium Child resource A child resource is an ARM or Bicep resource whose full type and name include a parent resource segment, whether declared inside the parent or separately with a parent reference. Azure Resource Manager fundamentals 3 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Cloud resource hygiene Cloud resource hygiene is an operational governance practice for keeping Azure resources organized, tagged, owned, secured, monitored, costed, and retired when no longer needed. Operational hygiene intermediate 3 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Management-plane operation A management-plane operation is an Azure control action. It is what you do when you create a virtual machine, update a storage account setting, assign a role, list resources, validate a deployment, or delete a resource group. Microsoft Learn anchors this term in What is Azure Resource Manager?, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended. In field use. Azure Resource Manager fundamentals 3 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Resource provider API profile A resource provider API profile is a compatibility idea: instead of choosing every API version one by one, a profile represents a known set of Resource Manager API versions that tooling can target together. Microsoft Learn anchors this term in Azure resource providers and resource types, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves the Azure environment is behaving as intended. In field use, start with. Resource providers fundamentals 3 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Resource provider feature A resource provider feature is a switchable or gated capability exposed by an Azure provider namespace. Many Azure services ship new behaviors gradually, and some features must be registered for a subscription before the service lets you use them. This is not the same as registering the provider namespace itself. Microsoft Learn anchors this term in az feature, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who owns the decision, and which evidence proves. Resource providers fundamentals 3 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance premium Resource provider mode Resource provider mode is a policy-design concept, not ordinary provider registration. In Azure Policy, a mode tells the policy engine what kind of resources or provider surface the definition evaluates. Most learners meet the common all or indexed modes first, but some policy definitions use provider-specific modes for specialized resource providers or data-plane-like surfaces. Microsoft Learn anchors this term in Azure Policy definition structure basics, but this field-manual definition is intentionally wider than an older short glossary entry because the page must teach what to inspect, what can break, who. Azure Policy fundamentals 3 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance field-manual-complete Azure Resource Manager Azure Resource Manager, often shortened to ARM, is the front door for managing Azure resources. Azure Resource Manager fundamentals 6 commands Aliases: ARM Quick peek Open full term page

Management and Governance verified Resource abbreviation Resource abbreviation recommendations in the Cloud Adoption Framework provide short examples mapped to Azure resource types and provider namespaces. Teams use them in naming conventions to keep names readable, consistent, and within resource length limits while still showing what each resource is. Tags and naming fundamentals 6 commands Aliases: Azure resource abbreviation, CAF resource abbreviation, naming abbreviation, resource type prefix, Azure naming prefix Quick peek Open full term page

Identity field-manual-complete Privileged Identity Management Privileged Identity Management, usually called PIM, is the Microsoft Entra feature that keeps powerful access from being permanently active unless someone really needs it. Access control fundamentals 5 commands Aliases: PIM Quick peek Open full term page

Management and Governance verified Resource delete protection Resource delete protection uses Azure management locks, usually CanNotDelete, to stop critical resources or resource groups from being deleted by ordinary control-plane operations. Management locks fundamentals 5 commands Aliases: Azure delete protection, management lock delete protection, CanNotDelete lock, delete lock, protected Azure resource Quick peek Open full term page

Management and Governance verified Resource dependency A resource dependency tells Azure Resource Manager which resource must exist before another resource can be deployed, updated, or configured during an ARM or Bicep deployment. ARM deployments fundamentals 5 commands Aliases: ARM dependency, Bicep dependency, dependsOn, implicit dependency, deployment dependency Quick peek Open full term page

Management and Governance verified Resource drift Resource drift is the gap between the intended Azure configuration in code, policy, or design and the resource state that actually exists after manual changes or unmanaged deployments. Operational hygiene intermediate 5 commands Aliases: Azure resource drift, infrastructure drift, configuration drift, IaC drift, deployment drift Quick peek Open full term page

Management and Governance verified Resource group deployment A resource group deployment runs an ARM template or Bicep file at one resource group scope so the resources in that workload boundary are created or updated together. ARM deployments intermediate 5 commands Aliases: ARM resource group deployment, deployment group, az deployment group, Bicep resource group deployment, resource group scope deployment Quick peek Open full term page

Management and Governance verified Resource group policy assignment A resource group policy assignment applies an Azure Policy definition or initiative to one resource group so resources inside that group are audited, denied, modified, or remediated according to the assignment. Azure Policy intermediate 5 commands Aliases: policy assignment at resource group, Azure Policy resource group scope, resource group scoped policy, RG policy assignment, policy scope resource group Quick peek Open full term page

Management and Governance field-manual-complete Resource ID A resource ID is the full address of an Azure resource. Azure Resource Manager fundamentals 5 commands Aliases: No aliases yet Quick peek Open full term page

Management and Governance verified Resource lifecycle Resource lifecycle is the story of what happens to an Azure resource from the moment someone asks for it until it is retired. It includes naming, approval, deployment, ownership, tagging, access, monitoring, patching, scaling, cost review, backup, policy compliance, change control, and cleanup. The point is not paperwork. The point is knowing who owns the resource, why it exists, what depends on it, how it changes safely, and when it should be removed. Without that trail, every later change becomes slower and riskier. Operational hygiene fundamentals 5 commands Aliases: Cloud resource lifecycle, Resource retirement lifecycle Quick peek Open full term page

Management and Governance verified Resource lock A resource lock is a control-plane safety catch for Azure resources. It tells Azure Resource Manager to block deletion or broader changes even when the user normally has permission. CanNotDelete is the common production guardrail because it stops accidental removal while still allowing most updates. ReadOnly is stricter and can break normal operations if used carelessly. Locks are not backups, RBAC, soft delete, or data protection. They are a deliberate pause before someone or something changes critical infrastructure. Azure Resource Manager fundamentals 5 commands Aliases: ARM lock, Management lock, Azure resource lock Quick peek Open full term page

Management and Governance verified Resource mover Azure Resource Mover helps move supported Azure resources to another region through a controlled workflow. Instead of manually rebuilding every VM, disk, network, and dependency, you create a move collection, add resources, resolve dependencies, prepare the target, initiate the move, and then commit or discard. It is useful when a workload must leave one region for compliance, latency, capacity, feature availability, or disaster-recovery readiness. It does not magically move every service, so support matrices and dependency validation matter. Azure Resource Manager fundamentals 5 commands Aliases: Azure Resource Mover, Move collection workflow Quick peek Open full term page

Management and Governance verified Resource name A resource name is the name you give an Azure resource, such as a storage account, virtual network, key vault, web app, or database. It is not the same as the full resource ID. The name is only one part of that ID, but it is what humans see first in portals, logs, scripts, alerts, and cost reports. Naming matters because different resource types have different length, character, uniqueness, DNS, and rename rules. That makes naming a permanent architecture decision in many services. Azure Resource Manager fundamentals 5 commands Aliases: Azure resource name, Resource naming Quick peek Open full term page