...
All permissions are granted via the Azure Portal, The user access is being granted to must have an account in the Azure AD tenant for the subscription the VM is in. They can be a guest user.
...
Page Comparison
Manage space
Manage content
Integrations