provided credentials have the Reader and Security Reader roles in all the subscriptions to assess:

1. Create a user in the desired directory
2. Grant the given user the role of Global Reader in the directory
3. Add the user to the desired subscription, with both Reader and Security Readerroles