This is an old revision of the document!
Azure Organization
Subscriptions
You might want an additional subscription to avoid reaching subscription limits, to create separate environments for billing and security, or to isolate data for compliance reasons.
It is not enough to grant a user the Global Admin role in AAD to give them access to a subscription. They must also be assigned an RBAC role (e.g. Owner, Contributor, Reader, etc).
Management Groups
- Management groups provide a governance scope above subscriptions