With auto_create no interactive user is the owner of the Workspace Enterprise App

[marrobi]

When creating a workspace with auto_create the workspace owner is set to the Application Admin account. This means that to add any users to the App Roles the interactive user must have privileges to access all Enterprise Apps in Azure AD, or ask their AD Admin to grant them access.

I suggest the creator of the workspace is also made an owner of the Workspace Enterprise application. This will mean they can also view sign in logs.

The user needs adding here: https://github.com/marrobi/AzureTRE/blob/caf6a9c2e68f7e74684249d112e2b083f77ac3a9/templates/workspaces/base/terraform/aad/aad.tf#L97