apples and oranges actually. Azure RBAC is great in that you can keep it within the same account. Orgs and accounts means you can never really share resources,

apples and oranges actually. Azure RBAC is great in that you can keep it within the same account. Orgs and accounts means you can never really share resources, nor move them between. Think about what happens if you have a VPC in account A, and a VPC in account B. I want them to talk over internal network inside the VPC. Now I have to setup VPC peering between accounts. Azure RBAC model could let me share one VNET, and simply permission the app resource groups.