More documentation on the aad setup. What are roles? Scopes? How do you assign users to roles. At the least point to the relevant doco.