Is there any way to prevent users from creating the azure subscription from the tenant?

Hi,

Let me give you some suggestions. Please let me know which (if any) you have tried and what concerns you have.

1. Create new management group and set it as default for new subscriptions. Apply very restrictive policy to this group. You can make it so essentially no resources can be created. This helps with the scenario where a user account creates a subscription and a bunch of VMs/etc. using stolen credit card.

2. Enable Require write permissions for creating new management groups setting so that users aren’t able to create new management groups

3. Turn on Restrict non-admin users from from creating tenants in Entra ID User settings

I know the above isn’t the “perfect” solution whereby you just flip a switch and new subscriptions are blocked.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP