Azure Policy inheritance
Policies assigned at a management group can apply to everything below. Azure Policy equals governance rules (standards/requirements). Assign at management group for broad coverage. Inherits to child scopes automatically. Helps prevent 'one subscription missing the rule'.