Resource Grouping

Keep parent and child Terraform resources together with inline child tables for memberships, subnets, routes, and rules.

azuread + azurerm + azuredevops

Related resources are grouped into a single parent section so reviewers can understand the full change in one place instead of jumping between separate resource entries.

Parent-Child Resource Grouping
➕ azuread_group platform_engineers👥 Platform Engineers (🆔 platform-engineers) | 3 👤 1 👥 1 💻 | ➕ 5 members
AttributeValue
display_namePlatform Engineers
mail_nicknameplatform-engineers

Members

ChangeMemberTerraform Resource
user-100members attribute
group-200members attribute
spn-300members attribute
➕ azurerm_virtual_network spoke🆔 vnet-spoke in 📁 rg-tfplan2md-demo 🌍 eastus 🌐 10.1.0.0/16 | ➕ 1 subnets | ♻️ 1 subnets

Subnets

ChangeNameAddress PrefixesNSGDelegationTerraform Resource
🆔 snet-app🌐 10.1.1.0/24--module.network.azurerm_subnet.app
♻️🆔 snet-db🌐 10.1.20.0/24--module.network.azurerm_subnet.db
<summary>➕ azuread_group <b><code>platform_engineers</code></b> — <code>👥 Platform Engineers</code> (<code>🆔 platform-engineers</code>) | <code>3 👤 1 👥 1 💻</code> | ➕ 5 members</summary>

#### Members

| Change | Member | Terraform Resource |
| ------ | ------ | ------------------ |
| ➕ | `user-100` | `members attribute` |
| ➕ | `group-200` | `members attribute` |
| ➕ | `spn-300` | `members attribute` |

<summary>➕ azurerm_virtual_network <b><code>spoke</code></b> — <code>🆔 vnet-spoke</code> in <code>📁 rg-tfplan2md-demo</code> <code>🌍 eastus</code> <code>🌐 10.1.0.0/16</code> | ➕ 1 subnets | ♻️ 1 subnets</summary>

#### Subnets

| Change | Name | Address Prefixes | NSG | Delegation | Terraform Resource |
| ------ | ---- | ---------------- | --- | ---------- | ------------------ |
| ➕ | `🆔 snet-app` | `🌐 10.1.1.0/24` | - | - | `module.network.azurerm_subnet.app` |
| ♻️ | `🆔 snet-db` | `🌐 10.1.20.0/24` | - | - | `module.network.azurerm_subnet.db` |

Where It Helps

  • Azure AD groups and group memberships
  • Azure virtual networks with inline subnet tables
  • NSGs, DNS records, and route tables with child rows kept under the parent
  • Azure DevOps group and team membership scenarios

Learn More

Parent-child grouping keeps the high-level summary accurate while making child changes visible inline.