SAML for Bitbucket: Explicit add under global permisssions still necessary?

[Kailash Sabhnani]

SAML SSO from my Azure AD to Bitbucket Server 7.21 is working well.

My question relates to whether I still need to explicitly add a new user under Global Permissions as we used to. Or can I simply add them to the AAD-mapped groups within Bitbucket thereby achieving authorization AND authentication simultaneously?