In the Azure Portal, navigate back to the Azure AD Privileged Identity Management blade and click Azure AD roles.
On the AdatumLab500-04 | Quick start blade, in the Manage section, click Roles.
On the AdatumLab500-04 | Roles blade, click + Add assignments.
On the Add assignments blade, in the Select role drop-down, select Security Administrator.
On the Add assignments blade, click the No member selected, on the Select a member blade, click aaduser2, and then click Select.
Click Next.
Review the Assignment type settings and click Assign.
Note: User aaduser2 is now permanently assigned the Security Administrator role.