Resource groups: create, move resources between groups and subscriptions

A resource group is a logical container for resources that share a lifecycle: you deploy them together, manage access to them together and usually delete them together. Every resource must belong to exactly one resource group, and resource groups cannot be nested. Group by lifecycle and ownership, for example one resource group per application environment such as rg-shop-prod and rg-shop-test, rather than by resource type such as 'all VMs'. Role-based access control (RBAC) assignments, Azure Policy assignments and locks applied to a resource group are inherited by the resources in it, which is why the grouping matters.