Your company is migrating to Azure and has multiple departments. Each department's Azure resources will be managed by its own administrator. Which two methods can be used to segment the Azure environment for these departments? Each correct answer presents a complete solution.