I like to think of Azure resource groups as a group of resources required to run a single workload. That workload might be a networking stack for a production environment consisting of a vnet, subnet, vpn gateway etc. or an application workload consisting of a container app and some persistent storage services. Usually for me those are multiple ComponentResources.