Screenshot of Microsoft Entra admin center. Highlighted are options "users can register applications, Restrict non-admin users from creating tenants, users can create security groups, and restrict access to Microsoft Enra admin center.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/823/991/389/869/471/original/48a283f554d350b8.jpg