The documentation is unclear on how to create these initial subscriptions that the Accelerator PowerShell script asks for

[oZakari]

          The documentation is unclear on how to create these initial subscriptions that the Accelerator PowerShell script asks for. Others seem to be confused as well: https://www.reddit.com/r/AZURE/comments/16jemms/azure_landing_zone_bicep_accelerator_explain/

If the answer is to manually create the subscriptions, that seems to defeat much of the purpose of the accelerator. In other words, I would like to be able to use the accelerator with an empty root management group and a single global admin who has the proper permissions.

Originally posted by @kardiojack in #705 (comment)

[jtracey93]

Happy to consider how we add this to the accelerators. Both bicep and terraform.

We just need to be careful as it's not only GA permissions and RBAC on the / scope in Azure. But also RBAC on a billing account which are not inherited from the 2 previous ones.

Also some customers may not have programmatic access to create subs directly so we need to still allow subscriptions to be pre-created and supplied to the accelerator.