Roles

Checkout at [link] (https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles)

Example

"Virtual Machine Contributor" role allows users to manage virtual machines and attached disks but does not grant permissions to manage disk snapshots. Managing disk snapshots requires specific permissions, such as those granted by the "Disk Snapshot Contributor" role."Microsoft Graph
- this is an API to connect to Entra - e.g az ad create user New-MgUser https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.users/new-mguser?view=graph-powershell-1.0