Which governance tool lets an organization manage policies and compliance across multiple Azure subscriptions?

Azure Management Groups allow you to efficiently manage access, policies, and compliance across multiple Azure subscriptions. By organizing subscriptions into a hierarchical structure, you can apply governance policies at a higher level, which then inherit down to all subscriptions and resources within that management group. This simplifies large-scale governance. Azure Tags are used to categorize resources for billing, management, and organization, but they don't enforce policies across subscriptions. Azure Blueprints define a repeatable set of Azure resources and policies, but management groups provide the hierarchical structure for applying those blueprints across subscriptions. Azure Resource Groups are logical containers for resources within a single subscription and do not span multiple subscriptions for policy enforcement.