We think of them as "lifecycle boundaries," because when resources share a resource group, their lifecycles (from create, to update, to delete) are managed in an integrated way. Use resource groups to collect and manage all your application resources. Link resources across resource groups, share resources across lifecycle boundaries, and manage costs. View, monitor, and track your usage and billing for all the resources your application uses. New visuals show you every resource in the group, including any resources that are linked across groups.
In terms of structure and management these groups can be built around the institutions Azure Active Directory or Office365 tenant to ensure only users of appropriate groups and team have access to the necessary resources.
Here is a an example of the types of users and role which they may undertake,
if your interested in learning more about Azure subscriptions in your institution please get in touch and we can introduce you to your institutions Microsoft account manager