How to Grant Access to Azure Subscriptions via CSP Channel for Indirect Providers (Disti)?

Hi all,

I am seeking advice on how an Indirect Provider (Distributor) can grant access to Azure subscriptions through the CSP (Cloud Solution Provider) channel. Specifically, I have the following questions:

1. Is it possible to automate the process of granting access to Azure subscriptions for resellers or end users?
2. What permissions are necessary to grant this access smoothly and without issues?
3. Is GDAP (Granular Delegated Admin Privileges) required, or will a Foreign Principal suffice for managing access for resellers or end users?

Any insights or experiences on this process would be greatly appreciated.

Thank you in advance!