A tenant/ user account used during the sign-up of Azure subscription has a default role of Global Administrator assigned. The Global Administrator role can modify everything in the Azure AD organization. The link here provides detail of all the available roles. The following two roles gives most of what is required for Dynamics CE and Power Apps Portal.
Scenario Example:
In the example below we will create a new user with the following credentials and assign the Power Platform administrator role to see the end result
User Name: jsmith@idyconsulting.onmicrosoft.com
- Logon to Azure AD portal at https://aad.portal.azure.com/ with user having Global Administrator account and choose “New User”
- With no assigned roles logging on to Office 365 portal https://portal.office.com will display the following
- Assign the user “jsmith” a role of built-in Azure AD Power platform administrator role and access to Dynamics 365 CE will be available only after assigning product license
Product licenses can be managed from Microsoft 365 admin center
Information Dynamics 