New-AzSubscriptionDeployment is the correct answer, as the New-AzResourceDeployment is used to deploy in an existing resource group. You can use New-AzSubscriptionDeployment(which is an alias for New-AzDeployment) to deploy resources at subscription level. "The New-AzResourceGroupDeployment cmdlet adds a deployment to an existing resource group" https://learn.microsoft.com/en-us/powershell/module/az.resources/new- azresourcegroupdeployment?view=azps-10.4.1 https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/deploy-to- subscription?tabs=azure-powershell