Active Directory

Add a user:
Azure Active Directory->Users->New User:
Create user in organization (youmail.onmicrosoft.com) or invite user
We will create a user jimmy with no permission yet.

Assign roles to jimmy by built in groups and access.

Directory roles, it is a long list

Or make a group and add jimmy to the group
IAM (Access control to that particular resource)
Here we have a vnet

Let’s check IAM and assign jimmy to it.
We add reader

We add jimmy to the role

And we review + assign