Hi,
You have probably assigned them a role in Azure AD. Keep in mind that roles in Azure AD and Azure are different. To give access to Azure assign Azure roles on the scope (management group, subscription, resource group or resource) that you need. When you want to give access to Azure AD operations use Azure AD roles.
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.