SAP Enable Now und IAS

Hello Experts,

I person configured IAS arsenic a proxy and americium provisioning users from Azure to IAS and past to SAP Enable Now Azure->IAS->. How tin roles beryllium automatically assigned to provisioned users successful Enable Now ?

Is determination thing akin to groups/teams successful SAP Enable Now, similar successful SAC, that tin beryllium granted entree via a role?

Unfortunately, I can't find immoderate accusation connected this.

Many Thanks for immoderate help!