You have an Azure subscription that contains 1,000 resources. You need to generate compliance reports for the subscription. The solution must ensure that the resources can be grouped by department…

Application groups are not a standard Azure resource grouping mechanism for compliance reporting, and quotas limit resource consumption rather than organize for departmental grouping.

Azure Tags allow resources to be categorized with key-value pairs, such as 'Department: Sales', enabling logical grouping across the subscription. Azure Policy can then enforce consistent tagging, audit for non-compliant resources, and generate reports that leverage these tags for departmental compliance reporting.

Administrative units are for delegating administrative rights over Azure AD objects, and Azure Lighthouse is for managing multiple tenants, neither of which directly groups Azure resources by department for compliance reporting.

While resource groups organize resources, tags offer more granular and flexible departmental grouping for reporting across a large number of resources, and role assignments manage access, not reporting categories.