If you can spare the expense ($5/mo/user and a domain) you really should be putting Azure resources in a Microsoft 365 tenant instead of using MSA/live.com acco

If you can spare the expense ($5/mo/user and a domain) you really should be putting Azure resources in a Microsoft 365 tenant instead of using MSA/live.com accounts. Microsoft will act as a 'processor' instead of a 'controller' of your data in this configuration.