Azure Active Directory-添加具有多个代理/角色的用户

Question

In my current non-Azure AD, I am handling agents for a insurance company. A given Agent could be a member of multiple agencies where the agent's roles could be different at each agency. Something like this:

Based on the Azure Portal, the only approach that I can see (and I do not want to do it) is to make each Group/Role be a group and have the user be part of the the Group/Role group. Something like this:

But this approach would cause me to create 4 or 5 times the groups that I truly need and seems messy to maintain. Is there an approach that I am not seeing that would give me similar functionality in AAD that I currently have in my non-Azure AD?

Answer 1

You can not assign AAD roles to a group, you need to assign the roles to the specific user.

Refer to this feedback for more details.