Thank you for your post and I apologize for the delayed response!
I understand that you're using Azure Active Directory Domain Services (Azure AD DS) and would like to configure permissions for users whenever a new user logs into your server(s). To hopefully help point you in the right direction or resolve your issue, I'll share my findings below.
Findings:
When it comes to configuring permissions for new users whenever they login to your server(s), you should be able to administer a Group Policy in your Azure AD DS managed domain and customize the GPO as needed for your environment. For example, you can create a PowerShell script that adds the new user to a group, with the necessary permissions, whenever they log-in for the first time.
Additional Links:
- Administer Group Policy in an Azure Active Directory Domain Services managed domain
- Create a custom Group Policy Object
- Group Policy Overview
- How to assign user logon scripts
- Management concepts for user accounts, passwords, and administration in Azure Active Directory Domain Services
I hope this helps!
If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.
If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.