Creating, configuring, and managing users
In order to be able to create users in Azure AD, you will need to have the Global Administrator or the User Administrator role. Since the best practice is to adhere to the principle of least privilege, the User Administrator role assignment should be given to anyone who is required to create, configure, and manage users within Azure AD.
Once you are in Azure AD with the proper role, you have the ability to create users. This chapter will focus on member users in detail, with a high-level focus on guest users and hybrid or AD users. External and guest users and hybrid users will be covered in later chapters.
Member users
Member users are those users who are cloud-native to the Azure AD tenant. They are the direct users from the company that need access to Microsoft 365 and/or Azure resources. These users are typically the first users that are added to the tenant when it is created and then assigned the various groups and roles that...
