SAP landing zone governance: Policy vs locks vs PIM vs Advisor
This sheet compares Azure Policy, Resource locks, PIM + MFA, Custom RBAC, Azure Advisor.
| Criterion | Azure Policy | Resource locks | PIM + MFA | Custom RBAC | Azure Advisor |
|---|---|---|---|---|---|
| Job | Enforce region/tag/disk/zone standards at scale | Block change after go-live | Just-in-time privileged elevation | Least-privilege per team | Surface recommendations only |
The verdict, the full comparison, 5 rules and 2 traps are part of AZ-120 access. Unlock AZ-120.