Currently Dynamics 365 only allows the System Administrator to import users for Azure AD into AX.  This function appears to be hardwired in AX.  However, this provides to much access to the rest of AX.

Client would like the Security Administrator function to have the ability to import users from Azure AD.  The security Administrator function can then be restricted from access to other AX functionality.