Working in Azure DevOps requires a service connection to authenticate and deploy resources to Azure. Typically we scope this to a single Azure subscription. Something that is useful and not as common is deploying to multiple subscriptions under a management group.