Question

A financial services company is acquiring another firm that has its own Azure AD tenant and several Azure subscriptions. During the 18-month integration period, both tenants must remain separate for regulatory reasons. The central platform team needs to enforce a mandatory 'CostCenter' tag on all resource groups across both tenants, produce a unified compliance report on tag adherence, and delegate remediation to a small operations team without recreating those admins as guest accounts in the acquired tenant. Which approach best meets these requirements?

Accepted Answer

Use Azure Lighthouse to onboard the acquired tenant's subscriptions, then assign Azure Policy definitions and initiatives through the delegated Lighthouse scope, and manage compliance centrally with the operations team's home-tenant identities.

Answer

Create a single management group hierarchy spanning both tenants and apply an Azure Policy initiative with the 'CostCenter' tag requirement at the top-level management group.

Answer

Invite the operations team as B2B guest users in the acquired tenant and grant them Owner on each subscription so they can apply the tag policies manually.

Answer

Enable Azure Arc on the acquired tenant's resources and use guest configuration policies to enforce the tag requirement across both tenants.