pgadmin4 only uses Azure AD for authentication. However users logged in with Azure SSO(or any OAuth2) are the normal users who have all the access other than adding new users.
Not sure what exactly you mean 'Read only profiles'? What are the limitations you have seen in pgadmin?
Trying to switch IdP Provider from Onelogin ( working right now with Pgadmin4 + Webserver Authentication + Onelogin as IdP provider to Azure SAML SSO.
It looks like the mapped attributes might be the one causing the issue coming from Azure side.
The username in a form of firstname.lastname@domain.com gets parsed correctly but the actual group memberships not being passed along and therefore users being logged in with read only profiles and it does not respect their group memberships.
