This is an excellent security and ownership model. It correctly identifies that an admin should be able to see what is paying for an organization but should only be able to switch it to a payment method they personally control.
Recommendation:
This implies that the Subscription or Organization entity will have a reference to the currently active PaymentProfileId. Your logic will need to verify that the user attempting the change is the owner of the new PaymentProfileId.
This is an excellent security and ownership model. It correctly identifies that an admin should be able to see what is paying for an organization but should only be able to switch it to a payment method they personally control.
Recommendation:
This implies that the Subscription or Organization entity will have a reference to the currently active PaymentProfileId. Your logic will need to verify that the user attempting the change is the owner of the new PaymentProfileId.