A SaaS company wants its production platform and its experimental sandbox to be billed as completely separate units, each with its own invoice and its own access-control rules. Which approach should the platform lead take to meet both requirements with the least administrative effort?

1. A. Create one resource group per environment and ask Azure support to issue invoices for each resource group 💬 A
2. B. Create one management group per environment, and place all of the environment's resources directly inside the management group 💬 B
3. C. Create a separate subscription for each environment, giving each its own billing reports and invoices and its own access rules ✓ C
4. D. Register a second Azure account in a brand-new tenant and rebuild the sandbox environment there 💬 D

Reveal answer

Correct answer: Create a separate subscription for each environment, giving each its own billing reports and invoices and its own access rules

Reference: https://learn.microsoft.com/en-us/training/modules/describe-core-architectural-components-of-azure/6-describe-azure-management-infrastructure