With Contributor role to Subscription and RG - user can -
Create and manage all of types of Azure resources with subscription and RG
but user can not
grant access to others or assign any roles to resources
----------
Please don't forget to Accept Answer and Up-vote if the response helped -- Vaibhav