You can use Harness' SCIM integration with Azure Active Directory (AD) to automatically provision users and/or groups in Harness based on their assignments in Azure AD.
For setup instructions, see Microsoft's Tutorial: Configure Harness for Automatic User Provisioning.
Assigning Permissions Post-Provisioning
Permissions can be assigned manually or via the Harness API:
Harness uses email addresses for SCIM provisioning. If you change the email address in AD, Harness sees this as a new user. Harness cannot sync email address changes.