In Business Central on-prem we can manage user permissions based on Azure AD security groups, but in the SaaS version this is not an option. If a tenant has many users it is a very time consuming task to add permissions to each user. The current process is to add a BC license to users then update users from O365 in BC and then add/modify user groups. The preferred process would be to create new users in Azure AD/O365 portal and add relevant security groups and licenses. As today a users with a valid BC license logging into https://businesscentral.dynamics.com/ will be created automatically in BC and based on a mapping between AD security groups and BC user groups they should get the relevant user groups assigned including company limitations