As organizations start using more and more Azure cloud, subscription management becomes a key area of the organization, governance, and security. A tenant may contain many subscriptions, and when using the Subscriptions page, the user can add/remove subscriptions to the existing tenant without any control.
The use of policies restricts that ability to create subscriptions. The policies can be managed through the button Manage Policies in the Subscriptions blade, as depicted in the image below.
The Azure subscription policies are simple. We can control if everyone can either add or remove a subscription on the current tenant. We can also block the ability to add/remove subscriptions to all users.
We have an area for exempted users. This way, we can block the ability to everyone and give just a few users the ability to manage subscriptions.
