We have an Enterprise application, as an azure subscription owner I can add users to the application and assign them a role.
We would like to give other users the permissions to add users to our application but not give them full control of the Azure Subscription.
Can this be done, with and without an Azure Active Directory Premium subscription?
We have AzureAD connect setup, so we could manage this by groups but you need the premium subscription to work with groups.
Self-service may be an option but that asks for a group and we don't have premium.