A tenant/ user account used during the sign-up of Azure subscription has a default role of Global Administrator assigned. The Global Administrator role can modify everything in the Azure AD organization. The link here provides detail of all the available roles. The following two roles gives most of what is required for Dynamics CE and Power Apps Portal.
In the example below we will create a new user with the following credentials and assign the Power Platform administrator role to see the end result
User Name: email@example.com
- Assign the user “jsmith” a role of built-in Azure AD Power platform administrator role and access to Dynamics 365 CE will be available only after assigning product license
Product licenses can be managed from Microsoft 365 admin center