Hierarchical

ARM framework manages access, authorization, policies, locks, and other management-related features in a hierarchical way. It means that there are parent-child relationships between these artifacts. The artifacts that form this hierarchy are management groups, subscriptions, resource groups, and resources. Providing access at the subscription level automatically provides access to the resource groups and the resources within them. The top most artifact is management group, which is a logical container for grouping Azure subscriptions; below it, subscriptions and resource groups are within subscriptions, and finally resources are within resource groups. This feature helps with the easy management and application of management-related activities to multiple subscription, resource groups, and resources.