Based on this article: https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/#azure-landing-zone-architecture Under single Azure tenant with single Entra ID domain with a minimum Entra ID Premium P1 license. Do we deploy multiple Azure Subscriptions to build the landing zones as in this diagram https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/enterprise-scale/media/azure-landing-zone-architecture-diagram-hub-spoke.svg#lightbox ? Any help would be greatly appreciated.

Correct - that's the "subscription vending" aka "subscription democratization" based approach It's suitable in scenarios where you have a single Entra tenant If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated. hth Marcin

Azure landing zone architecture with multiple subscriptions?

Accepted answer

Marcin Policht 34,645 Reputation points MVP

2025-02-04T00:42:47.7766667+00:00

Correct - that's the "subscription vending" aka "subscription democratization" based approach

It's suitable in scenarios where you have a single Entra tenant

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin
Please sign in to rate this answer.
EnterpriseArchitect 5,646 Reputation points

2025-02-04T00:56:01.51+00:00

@Marcin Policht ,
Thank you for the quick response, so in this case, the Entra ID Premium P1 is the minimum license required to support the scenario I mentioned in the above link ?

Or can I just use the Entra ID without P1 or P2 license?

EnterpriseArchitect 5,646 Reputation points

2025-02-04T01:03:45.0333333+00:00

Also, for the multiple B2C Tenants is the above landing page sufficient or it must be something else ?

From: https://portal.azure.com/#browse/Microsoft.AzureActiveDirectory%2Fb2cDirectories I have 60+ B2C tenant for each stage of applications like:

App1-DevApp1-TestApp1-Prod App2-Dev App2-Test App2-Prod ... AppX-Dev AppX-Test AppX-Prod

Marcin Policht 34,645 Reputation points MVP

2025-02-04T02:57:27.71+00:00

If you want to follow https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/#azure-landing-zone-architecture to the letter, then you'd need P2 - but that's not tied to the "subscription vending" model but rather to the considerations regarding PIM and other Entra ID related functionality. I don't see how B2C relates to it - this is about Azure

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

EnterpriseArchitect 5,646 Reputation points

2025-02-04T05:00:54.8733333+00:00

Thank you @Marcin Policht
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure landing zone architecture with multiple subscriptions?

0 additional answers

Your answer