graph TD %% Azure AD Tenant A[Azure AD Tenant] %% Management Groups A --> MG_ROOT[Root Management Group] MG_ROOT --> MG_Prod[Prod] MG_ROOT --> MG_Test[Pre-Prod/Test] MG_ROOT --> MG_Shared[Shared Services] %% Prod Subscriptions & RGs subgraph Prod_Subscriptions["Production Subscriptions"] MG_Prod --> Sub_App_Prod[App-Production Subscription] MG_Prod --> Sub_Data_Prod[Data-Production Subscription] MG_Prod --> Sub_AI_Prod[AI-Production Subscription] Sub_App_Prod --> RG_Web[rg-prod-web] Sub_App_Prod --> RG_API[rg-prod-api] Sub_Data_Prod --> RG_DB[rg-prod-db] Sub_Data_Prod --> RG_Datalake[rg-prod-datalake] Sub_AI_Prod --> RG_ML[rg-prod-ml] end %% Test Subscriptions & RGs subgraph Test_Subscriptions["Pre-Prod/Test Subscriptions"] MG_Test --> Sub_App_Test[App-Test Subscription] MG_Test --> Sub_Data_Test[Data-Test Subscription] MG_Test --> Sub_AI_Test[AI-Test Subscription] Sub_App_Test --> RG_Web_Test[rg-test-web] Sub_App_Test --> RG_API_Test[rg-test-api] Sub_Data_Test --> RG_DB_Test[rg-test-db] Sub_Data_Test --> RG_Datalake_Test[rg-test-datalake] Sub_AI_Test --> RG_ML_Test[rg-test-ml] end %% Shared Services Subscriptions & RGs subgraph Shared_Services["Shared Services Subscriptions"] MG_Shared --> Sub_Network[Networking Subscription] MG_Shared --> Sub_Security[Identity & Security Subscription] MG_Shared --> Sub_Logging[Logging & Monitoring Subscription] Sub_Network --> RG_Shared_Network[rg-shared-network] Sub_Security --> RG_Shared_Security[rg-shared-security] Sub_Logging --> RG_Shared_Logging[rg-shared-logging] end