Your organization will create separate Azure subscriptions per department, all associated with the same Azure AD tenant. You need each subscription to have identical role assignments. Which service should you use to apply the same role configuration across subscriptions?

Azure Blueprints allows you to define a repeatable set of Azure resources, policies, and role assignments that can be deployed consistently across subscriptions. This ensures that each new departmental subscription starts with the same foundational configuration, including identical role assignments. Azure Security Center focuses on security posture management and threat protection, not consistent resource deployment. Azure Policy enforces rules and effects over resources, but it doesn't deploy a complete set of resources and role assignments as a single package. Azure AD Privileged Identity Management (PIM) manages, controls, and monitors access to important resources, primarily for just-in-time access, not for baseline role assignment deployment across multiple subscriptions.