2.3. Describe access management capabilities of Azure AD