@enough-kite-69616 I just went though this myself. Your AAD account (that you log into the Azure Portal) needs to have permissions to create objects in the AAD, which backs all of your company's subscriptions.