Skip to content

Commit 616b228

Browse files
mbender-msmbender-ms
committed
AVNM | Maintenance | Modular content update
1 parent fde3a79 commit 616b228

4 files changed

Lines changed: 232 additions & 6 deletions

File tree

‎articles/networking/includes/azure-virtual-network-manager/create-resource-group.md‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
---
2+
title: include file
3+
description: include file
4+
services: virtual-network-manager
5+
author: mbender-ms
6+
ms.service: azure-virtual-network-manager
7+
ms.topic: include
8+
ms.date: 03/23/2026
9+
ms.author: mbender
10+
ms.custom: include file
11+
---
12+
13+
## Create a resource group
14+
15+
Create a resource group to hold the resources used in this article.
16+
17+
1. Sign in to the [Azure portal](https://portal.azure.com/).
18+
19+
1. Select **+ Create a resource** and search for **Resource group**. Then select **Resource group** > **Create**.
20+
21+
1. On the **Basics** tab, enter or select the following information:
22+
23+
| Setting | Value |
24+
| ------- | ----- |
25+
| **Subscription** | Select your subscription. |
26+
| **Resource group** | Enter a name for the resource group. |
27+
| **Region** | Select a region for the resource group. |
28+
29+
1. Select **Review + create** and then **Create**.

‎articles/networking/includes/azure-virtual-network-manager/virtual-network-manager-create-instance-complete.md‎

Lines changed: 131 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,131 @@
1+
---
2+
title: include file
3+
description: include file
4+
services: virtual-network-manager
5+
author: mbender-ms
6+
ms.service: azure-virtual-network-manager
7+
ms.topic: include
8+
ms.date: 02/02/2026
9+
ms.author: mbender
10+
ms.custom: include file
11+
---
12+
13+
## Create a Virtual Network Manager instance
14+
15+
Deploy a Virtual Network Manager instance with the defined scope and access that you need. You can create a Virtual Network Manager instance using the Azure portal, Azure CLI, or Azure PowerShell.
16+
17+
# [Portal](#tab/azure-portal)
18+
19+
1. Sign in to the [Azure portal](https://portal.azure.com/).
20+
21+
1. Select **+ Create a resource** and search for **Network Manager**. Then select **Network Manager** > **Create** to begin setting up Virtual Network Manager.
22+
23+
1. On the **Basics** tab, enter or select the following information:
24+
25+
| Setting | Value |
26+
| ------- | ----- |
27+
| **Subscription** | Select the subscription containing your existing virtual networks. |
28+
| **Resource group** | Select the existing resource group where you want to deploy Virtual Network Manager. |
29+
| **Name** | Enter a name for your Virtual Network Manager instance. |
30+
| **Region** | Select a region for your Virtual Network Manager instance. Virtual Network Manager can manage virtual networks in any region. The selected region is where the Virtual Network Manager instance will be deployed. |
31+
| **Description** | *(Optional)* Provide a description about this Virtual Network Manager instance and the task it's managing. |
32+
| [Features](../../../virtual-network-manager/concept-network-manager-scope.md#features) | Select the features you need from the dropdown list: </br> - **Connectivity**: Enables the creation of a full mesh or hub-and-spoke network topology between virtual networks within the scope. </br> - **Security Admin**: Enables the creation of global network security rules. </br> - **Routing**: Enables the creation and management of user-defined routes at scale. |
33+
34+
1. Select the **Management scope** tab or **Next: Management scope** to continue.
35+
36+
1. On the **Management scope** tab, select **+ Add**.
37+
38+
1. In the **Add scopes** pane, select the subscriptions or management groups containing your existing virtual networks, and choose **Select**.
39+
40+
1. Select **Review + create** to validate your configuration.
41+
42+
1. After validation passes, select **Create** to deploy the Virtual Network Manager instance.
43+
44+
# [Azure CLI](#tab/azure-cli)
45+
46+
1. Sign in to Azure and set your subscription context:
47+
48+
```azurecli-interactive
49+
az login
50+
az account set --subscription "<subscription-id>"
51+
```
52+
53+
1. Install or update the Virtual Network Manager extension:
54+
55+
```azurecli-interactive
56+
az extension add --name virtual-network-manager
57+
az extension update --name virtual-network-manager
58+
```
59+
60+
1. Create a Virtual Network Manager instance using [az network manager create](/cli/azure/network/manager#az-network-manager-create). Replace the placeholder values with your specific information:
61+
62+
```azurecli-interactive
63+
az network manager create \
64+
--name "<network-manager-name>" \
65+
--location "<region>" \
66+
--resource-group "<existing-resource-group-name>" \
67+
--scope-accesses "Connectivity" "SecurityAdmin" \
68+
--network-manager-scopes subscriptions="/subscriptions/<subscription-id>" \
69+
--description "<optional-description>"
70+
```
71+
72+
> [!NOTE]
73+
> For management group scope, use: `managementGroups="/providers/Microsoft.Management/managementGroups/<management-group-id>"`
74+
> Ensure the specified resource group already exists in your subscription.
75+
76+
# [Azure PowerShell](#tab/azure-powershell)
77+
78+
1. Sign in to Azure and set your subscription context:
79+
80+
```azurepowershell-interactive
81+
Connect-AzAccount
82+
Set-AzContext -Subscription "<subscription-id>"
83+
```
84+
85+
1. Install or update the Azure PowerShell module:
86+
87+
```azurepowershell-interactive
88+
Install-Module -Name Az.Network -Force
89+
```
90+
91+
1. Define the scope and access type for your Virtual Network Manager instance:
92+
93+
```azurepowershell-interactive
94+
# Define subscription scope
95+
$subscriptionId = "<subscription-id>"
96+
[System.Collections.Generic.List[string]]$subGroup = @()
97+
$subGroup.Add("/subscriptions/$subscriptionId")
98+
99+
# Define access types
100+
[System.Collections.Generic.List[String]]$access = @()
101+
$access.Add("Connectivity")
102+
$access.Add("SecurityAdmin")
103+
104+
# Create scope object
105+
$scope = New-AzNetworkManagerScope -Subscription $subGroup
106+
```
107+
108+
1. Create the Virtual Network Manager instance using [New-AzNetworkManager](/powershell/module/az.network/new-aznetworkmanager):
109+
110+
```azurepowershell-interactive
111+
$networkManagerParams = @{
112+
Name = "<network-manager-name>"
113+
ResourceGroupName = "<existing-resource-group-name>"
114+
Location = "<region>"
115+
NetworkManagerScope = $scope
116+
NetworkManagerScopeAccess = $access
117+
Description = "<optional-description>"
118+
}
119+
120+
$networkManager = New-AzNetworkManager @networkManagerParams
121+
```
122+
123+
> [!NOTE]
124+
> Ensure the specified resource group already exists in your subscription.
125+
126+
---
127+
128+
> [!IMPORTANT]
129+
> Virtual Network Manager requires specific permissions within the defined scope. Ensure you have the necessary [Azure RBAC roles](../../../virtual-network-manager/concept-network-manager-scope.md#permissions) before creating the instance.
130+
131+
The Virtual Network Manager instance is now created and ready to manage your existing virtual networks within the defined scope. You can proceed to create network groups and configurations to organize and manage your virtual networks.

‎articles/networking/includes/azure-virtual-network-manager/virtual-network-manager-create-instance-portal.md‎

Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
1+
---
2+
title: include file
3+
description: include file
4+
services: virtual-network-manager
5+
author: mbender-ms
6+
ms.service: azure-virtual-network-manager
7+
ms.topic: include
8+
ms.date: 02/02/2026
9+
ms.author: mbender
10+
ms.custom: include file
11+
---
12+
13+
## Create a Virtual Network Manager instance
14+
15+
Deploy a Virtual Network Manager instance with the defined scope and access that you need using the Azure portal.
16+
17+
1. Sign in to the [Azure portal](https://portal.azure.com/).
18+
19+
1. Select **+ Create a resource** and search for **Network Manager**. Then select **Network Manager** > **Create** to begin setting up Virtual Network Manager.
20+
21+
1. On the **Basics** tab, enter or select the following information:
22+
23+
| Setting | Value |
24+
| ------- | ----- |
25+
| **Subscription** | Select the subscription containing your existing virtual networks. |
26+
| **Resource group** | Select the existing resource group where you want to deploy Virtual Network Manager. |
27+
| **Name** | Enter a name for your Virtual Network Manager instance. |
28+
| **Region** | Select a region for your Virtual Network Manager instance. Virtual Network Manager can manage virtual networks in any region. The selected region is where the Virtual Network Manager instance will be deployed. |
29+
| **Description** | *(Optional)* Provide a description about this Virtual Network Manager instance and the task it's managing. |
30+
| [Features](../../../virtual-network-manager/concept-network-manager-scope.md#features) | Select the features you need from the dropdown list: </br> - **Connectivity**: Enables the creation of a full mesh or hub-and-spoke network topology between virtual networks within the scope. </br> - **Security Admin**: Enables the creation of global network security rules. </br> - **Routing**: Enables the creation and management of user-defined routes at scale. |
31+
32+
1. Select the **Management scope** tab or **Next: Management scope** to continue.
33+
34+
1. On the **Management scope** tab, select **+ Add**.
35+
36+
1. In the **Add scopes** pane, select the subscriptions or management groups containing your existing virtual networks, and choose **Select**.
37+
38+
1. Select **Review + create** to validate your configuration.
39+
40+
1. After validation passes, select **Create** to deploy the Virtual Network Manager instance.
41+
42+
> [!IMPORTANT]
43+
> Virtual Network Manager requires specific permissions within the defined scope. Ensure you have the necessary [Azure RBAC roles](../../../virtual-network-manager/concept-network-manager-scope.md#permissions) before creating the instance.
44+
45+
The Virtual Network Manager instance is now created and ready to manage your existing virtual networks within the defined scope.

‎articles/virtual-network-manager/create-virtual-network-manager-portal.md‎

Lines changed: 27 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ author: mbender-ms
55
ms.author: mbender
66
ms.service: azure-virtual-network-manager
77
ms.topic: quickstart
8-
ms.date: 07/11/2025
8+
ms.date: 03/23/2026
99
ms.custom:
1010
- template-quickstart
1111
- mode-ui
@@ -26,7 +26,28 @@ In this quickstart, you deploy three virtual networks and use Azure Virtual Netw
2626
- An Azure account with an active subscription. [Create an account for free](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn).
2727
- To modify network groups using Azure Policy to conditionally define membership, you must be [granted access through Azure Role-based Access Control (RBAC) role](concept-network-groups.md#network-groups-and-azure-policy) assignment only. Classic Admin or legacy authorization isn't supported.
2828

29-
[!INCLUDE [virtual-network-manager-create-instance](../../includes/virtual-network-manager-create-instance.md)]
29+
## Sample values
30+
31+
This quickstart uses the following sample values for creating resources. Use these values to follow along, or replace them with your own.
32+
33+
| Resource | Sample value |
34+
| --- | --- |
35+
| Resource group | **resource-group** |
36+
| Network Manager name | **network-manager** |
37+
| Region | **West US 2** |
38+
| Virtual networks | **vnet-00**, **vnet-01**, **vnet-02** |
39+
| VNet address spaces | **10.0.0.0/16**, **10.1.0.0/16**, **10.2.0.0/16** |
40+
| Network group | **network-group** |
41+
| Connectivity configuration | **connectivity-configuration** |
42+
| Azure Policy name | **azure-policy** |
43+
| Tag | Name: **NetworkType** / Value: **Production** |
44+
45+
[!INCLUDE [create-resource-group](../networking/includes/azure-virtual-network-manager/create-resource-group.md)]
46+
47+
> [!NOTE]
48+
> For this quickstart, select **Connectivity** from the **Features** dropdown when creating your Virtual Network Manager instance. Use the sample values from the preceding table for the resource group, name, and region fields.
49+
50+
[!INCLUDE [virtual-network-manager-create-instance-portal](../networking/includes/azure-virtual-network-manager/virtual-network-manager-create-instance-portal.md)]
3051

3152
## Create virtual networks
3253

@@ -40,7 +61,7 @@ Create three virtual networks by using the portal. Each virtual network has a `n
4061
| ------- | ----- |
4162
| **Subscription** | Select the subscription where you want to deploy this virtual network. |
4263
| **Resource group** | Select **resource-group**. |
43-
| **Virtual network name** | Enter **vnet-000**. |
64+
| **Virtual network name** | Enter **vnet-00**. |
4465
| **Region** | Select **(US) West 2**. |
4566

4667
1. Select the **IP addresses** tab.
@@ -117,13 +138,13 @@ By using [Azure Policy](concept-azure-policy-integration.md), you define a condi
117138

118139
:::image type="content" source="./media/create-virtual-network-manager-portal/network-group-conditional-thumb.png" alt-text="Screenshot of the pane for creating an Azure policy, including criteria for definitions." lightbox="media/create-virtual-network-manager-portal/network-group-conditional.png":::
119140

120-
2. The **Preview resources** pane shows the virtual networks for addition to the network group based on the defined conditions in Azure Policy. When you're ready, select **Close**.
141+
1. The **Preview resources** pane shows the virtual networks for addition to the network group based on the defined conditions in Azure Policy. When you're ready, select **Close**.
121142

122143
:::image type="content" source="media/create-virtual-network-manager-portal/preview-virtual-networks.png" alt-text="Screenshot of the pane for previewing the virtual networks.":::
123144

124-
3. Select **Save** to deploy the Azure Policy. It can take up to one minute for the policy to take effect and be added to your network group.
145+
1. Select **Save** to deploy the Azure Policy. It can take up to one minute for the policy to take effect and be added to your network group.
125146

126-
4. On the **Network Group** pane, under **Settings**, select **Group members** to view the membership of the group based on the conditions that you defined in Azure Policy. Confirm the **Source** is listed as **azure-policy - subscriptions/subscription_id**.
147+
1. On the **Network Group** pane, under **Settings**, select **Group members** to view the membership of the group based on the conditions that you defined in Azure Policy. Confirm the **Source** is listed as **azure-policy - subscriptions/subscription_id**.
127148

128149
:::image type="content" source="media/create-virtual-network-manager-portal/group-members-list.png" alt-text="Screenshot of listed group members with a configured source.":::
129150

0 commit comments

Comments
 (0)