I'm trying to use an Azure Function to modify user accounts in AzureAD. I want to run "Set-AzureADUser", etc within the Azure Function and have it modify AzureAD. I've assigned a Managed Identity to my Azure Function, but this only seems to give me access to Azure resources within my subscription. How do I either assign permissions for this managed identity to access AzureAD or provide access somehow for my Azure Function to modify AzureAD?