@vkc This reminds me of how no user role is capable of canceling an azure subscription.

https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/understand-mca-roles#subscription-billing-roles-and-tasks