You are designing a large Azure environment that will contain many subscriptions.

Azure Policy evaluates resources in Azure by comparing the properties of those resources to business rules.

Once your business rules have been formed, the policy definition or initiative is assigned to any scope of resources that Azure supports, such as management groups, subscriptions, resource groups, or individual resources.