Hi,
Please review the Microsoft Learning module - https://learn.microsoft.com/en-us/training/modules/plan-implement-privileged-access/4-configure-privileged-identity-management-for-azure-active-directory-roles
This is part of AAD Plan and implement privileged access and also this module is part of these learning paths
- MS-500 part 1 - Implement and manage identity and access
- SC-300: Plan and implement an identity governance strategy
Hope this helps.
JS
==
Please Accept the answer if the information helped you. This will help us and others in the community as well.