An enterprise must apply the same Azure policy to all current and future subscriptions in its production hierarchy. Where should it assign the policy?

1. Every individual network interface
2. The developer's Entra user object
3. The parent management group
4. A resource group in the oldest subscription