I am amazed that there are no controls out of the box to control what and how much users can see or use in the azure portal. When you give a user access to an account the have access to see every service whether they need it or not. Also they have access to consume as much of any service and run up bills to no end. I see how this makes good business sense for Microsoft but it's a HUGE oversight for an enterprise.

1. What we need are controls to limit what users have access to if we want.


2. We should have to ability to place quotas on resources and/or limit the amount of money a user or account can spend.


3. I think there should be an option to have accounts be able to enter a payment method for just that account which would be different from the top level. This way they can manage their own budget and spend.

These are just a couple off the top of my head but AWS has most of these controls already. Yet they are criticized for not being friendly for the enterprise.