net localgroup “Remote Desktop Users” /add “AzureAD\username@xyz.com”.