Prerequisites

Azure Requirements

• Azure subscription with Owner role
• Management group permissions — ability to create child management groups under Tenant Root Group
• Azure AD Global Administrator (one-time) — to grant management group access via Setup-ManagementGroupPermissions.ps1

CLI Tools

Tool	Version	Install
Azure CLI	2.60+	Install
Azure Developer CLI (azd)	1.9+	Install
Bicep CLI	0.30+	az bicep upgrade
PowerShell	7.4+	Install

Verify installation:

az --version
azd version
bicep --version
pwsh --version

Authentication

# Login to Azure CLI
az login

# Set your target subscription
az account set --subscription "your-subscription-name"

# Login to azd (uses Azure CLI credentials)
azd auth login

Dev Container (Recommended)

The repository includes a dev container with all required tools pre-installed:

• Azure CLI 2.60+ with Bicep extension
• Azure Developer CLI (azd) 1.9+
• PowerShell 7.4+
• GitHub CLI, Node.js, Python 3, Terraform

To use it:

1. Clone the repository
2. Open in VS Code
3. Press F1 → Dev Containers: Reopen in Container
4. All CLI tools are pre-configured — no manual installation needed

Resource Providers

The pre-provision hook automatically registers required providers, but you can verify manually:

az provider show -n Microsoft.Network --query registrationState -o tsv
az provider show -n Microsoft.KeyVault --query registrationState -o tsv
az provider show -n Microsoft.RecoveryServices --query registrationState -o tsv
az provider show -n Microsoft.OperationalInsights --query registrationState -o tsv