Configure access

Access can be configured against management groups or subscriptions.

In this example the two service principals are assigned to the two roles against the management group "OSX-MG-MAIN".