Please make it possible to forbid users to create Management Groups
Currently, users generally always have the permissions to create Management Groups. This cannot be forbidden via RBAC and there is no other way to forbid this in Azure AD.
It would make sense not to make this generally possible.
A good admin works according to the minimal rights principle, so this cannot be used completely :)