Microsoft Cloud
Your users, your tenant, explicit consent
Applications run in our Azure subscriptions, but the people using them sign in with their own Microsoft accounts - and any access to your tenant is something your administrator grants deliberately.