Global administrator cannot use Azure subscription
As a global administrator of a Microsoft tenant, you have access to all the resources in the tenant. If you purchase a new Azure subscription and try to create a new resource within the subscription, you will receive the error: “You do not have sufficient permissions to create resource groups in the subscription”.
Problem
The problem is that even if you are an administrator of the tenant, you are not by default also an owner of the subscription.
Solution
Go to the Azure portal and select the subscription. Select “Access control (IAM)” in the left menu. At the top, push “Add” -> “Add a Role assignment”.
Look for the “Owner” role that you will find in the “Privileged administrator roles” tab. Push “Next” at the bottom, select the user and complete the procedure.
You may have to wait 24 hours before you can use the Azure subscription as an owner, even if the new role is already on the user
