Azure Deployment Environments allows you to set up a managed identity to provision resources on behalf of authorized developers in a project.