Add a user:
Azure Active Directory->Users->New User:
Create user in organization (youmail.onmicrosoft.com) or invite user
We will create a user jimmy with no permission yet.
Assign roles to jimmy by built in groups and access.
Directory roles, it is a long list
Or make a group and add jimmy to the group
IAM (Access control to that particular resource)
Here we have a vnet
Let’s check IAM and assign jimmy to it.
We add reader
We add jimmy to the role
And we review + assign