Azure-AD joined VM authentication with Azure-AD

Question

Hello,

I have 3 points to confirm as follows with respect to Azure-AD joined VM authentication with Azure-AD for Linux and Windows VM explained at

https://learn.microsoft.com/en-us/azure/virtual-machines/linux/login-using-aad    
https://learn.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-windows    

1. As we know, the device from which we are kicking RDP-client to get into Windows VM must be AAD-joined or Hybrid-joined or AAD-Registered.
My understanding is there is NO restrictions with respect to the account.
Meaning, I can log in to the device with user1@Company portal .com but when pulling up RDP-client I can use user2@Company portal .com

2. Since this windows or Linux VM is registered as AAD-joined, who becomes the device-registered-owner and Device-Registered-User in Azure-AD ?

3. You said that the support is added in the next release of Windows to allow an Azure AD Registered Windows 10 box to RDP to an Azure AD join target machine.
This will allow you to add additional work or school accounts on you Windows 10 PC for each of the customer tenants you manage and then use the respective account to connect over RDP to your target Azure AD joined machine.
However, as per my understanding the device can be registered to only ONE tenant and all the additional work or school accounts that are added should also be from the SAME tenant.
Am I wrong in my understanding ?

Thanks.

Answer 1

1. You can use any Azure AD user account that has been granted one of the following RBAC roles: Virtual Machine Administrator Login or Virtual Machine User Login. RDP is used to connect to Windows devices, SSH to connect to Linux.
2. Linux devices cannot be joined to Azure AD.
3. Please share the link to the related documetation.

Answer 2

thanks @alfredo-revilla-msft

Just for my clarification I am answering in-line to your answers.

You can use any Azure AD user account that has been granted one of the following RBAC roles: Virtual Machine Administrator Login or Virtual Machine User Login. RDP is used to connect to Windows devices, SSH to connect to Linux.
Yes, I agree about the user's RBAC role. I am however not talking about this user-account.
I am talking about the user-account used to log into this AAD-joined or Hybrid-joined device itself.
Does the account used to log into this AAD-joined or Hybrid-joined device = account used to log into RDP-client

Linux devices cannot be joined to Azure AD.
OK got it.
And for windows VM, who would be the device-registered-owner and Device-Registered-User in Azure-AD

Please share the link to the related documentation.
Please check https://techcommunity.microsoft.com/t5/azure-active-directory-identity/azure-ad-authentication-to-windows-vms-in-azure-now-in-public/ba-p/827840