Allow users to change username on source AAD (RTC-39861)

Users, who are invited to tenant AAD, can change their user name (UPN) on source AAD and login to Cloud modules.

Behaviour of invite job is the same as before - users who are added to configured groups on source AAD are updated in tenant AAD or when removed - disabled on tenant. In configuration of job, there can be added groups with auto-provisioning and then users will be invited and added configured permissions. Casing of name of the group in AAD and in configuration must be the same, otherwise job will finish with warnings and users added to that group will not be invited.

Performance of job executions is good.

Fix: Staging merger aborted when duplicated key on ExternalStoreNo on Store (RTC-41220)

ExternalStoreNo is not unique in the identity database, so it does not cause problems during import.

Fix: Not possible to "Expand all" in user management (RTC-34799)

'Expand all' button expands the whole tree of user roles.

Fix for: Blob export when assigning permissions to a role (RTC-23813)

When permissions assigned to the role change, only users assigned to this role are exported, not all the users.