Explanation
Assign a role to a user
* Sign in to the Azure portal with an account that's a global admin or privileged role admin for the directory.
* Select Azure Active Directory, select Users, and then select a specific user from the list.
* For the selected user, select Directory role, select Add role, and then pick the appropriate admin roles from the Directory roles list, such as Conditional access administrator.
* Press Select to save.
References:
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-po