A consulting firm manages multiple clients' Azure environments and needs visibility and control without switching accounts. What is the best solution?

Azure Lighthouse is the best solution because it enables cross-tenant management, allowing a service provider (like a consulting firm) to manage multiple customer Azure subscriptions and resource groups from within their own Azure Active Directory tenant. This provides centralized visibility and control without needing to switch accounts. Azure Security Center focuses on security posture management and threat protection for individual tenants, not cross-tenant management. Azure Blueprints help define repeatable sets of Azure resources and policies for consistent deployment within a single tenant or across tenants with careful setup, but it's not primarily for ongoing delegated management. Azure Arc extends Azure management to resources outside of Azure, such as on-premises servers or other cloud environments, which is not the core requirement here.