My company is moving all its internal production and development servers to Azure, and needs a way to delegate administration while at the same time keeping track of resource usage; thus, we are going to create multiple subscriptions, one for core systems and one for each development project.
However, the management wants to make sure that if f.e. a project manager is granted administrative rights on a project-specific subscription, he doesn't create twenty A9 virtual machines and leave them running for three months; ideally, a resource limit should be imposed, so that he can create and manage his own VMs but he can't bankrupt the company with Azure bills.
Can this be achieved? How?