Three containers, three jobs
Each layer groups something different, for a different purpose. Management group: groups subscriptions (governance/access). Subscription: boundary where resources live. Resource group: groups resources (lifecycle management). Different layers, different responsibilities.