Merge pull request #292270 from bandersmsft/understand-mca-roles

MCM - Update understand-mac-role for invoice mgr

Author: prmerger-automator[bot]

articles/cost-management-billing/manage/understand-mca-roles.md

@@ -6,7 +6,7 @@ ms.reviewer: amberb
 ms.service: cost-management-billing
 ms.subservice: billing
 ms.topic: how-to
-ms.date: 08/21/2024
+ms.date: 12/20/2024
 ms.author: banders
 ---
 
@@ -144,10 +144,12 @@ The following tables show what role you need to complete tasks in the context of
 |Task|Billing profile owner|Billing profile contributor|Billing profile reader|Invoice manager|Billing account owner|Billing account contributor|Billing account reader
 |---|---|---|---|---|---|---|---|
 |View all Azure subscriptions for the billing profile|✔|✔|✔|✔|✔|✔|✔|
-|Create new Azure subscriptions|✔|✔|✘|✘|✔|✔|✘|
-|Cancel Azure subscriptions|✘|✘|✘|✘|✘|✘|✘|
+|Create new Azure subscriptions|✔|✔|✘|✔|✔|✔|✘|
+|Cancel Azure subscriptions|✘|✘|✘|✔¹|✘|✘|✘|
 |Change billing profile for the Azure subscriptions|✔|✔|✘|✘|✔|✔|✘|
 
+¹ Invoice manager can only cancel the subscriptions they created.
+
 ## Invoice section roles and tasks
 
 Each billing profile contains one invoice section by default. You can create more invoice sections to group cost on the billing profile's invoice. Users with roles on an invoice section can control who creates Azure subscriptions and make other purchases. Assign these roles to users who set up Azure environment for teams in our organization like engineering leads and technical architects. For more information, see [Understand invoice section](../understand/mca-overview.md#invoice-sections).