Azure Conditional Access User Role Provisioning Logic - DUO MFA