azure granting user or service principal access to a subscriptions

 After creating a new subscription in Azure, we probably need to assign users or service principal to use it. 

To do that, goto Azure subscription -> IAM -> Add Role Assignment -> Select the role that you would like to grant. Click "Next".

You will be prompted to select which users or service principal or managed identity to use. Click on "Select" and then finally click on "Review and create"

And in the diagram below you can see the results of executing az cli to list service princiapl roles assignment

 az role assignment list --assignee 056b7d2a-739c-4b8d-8c56-0731acbe53bb --all -o table

If you have no role assignment, you will get empty results []. 

Otherwise you will get the subscriptions this sp can access.