After trying to configure Role Level Security as described in the following article:
We experienced the following issue when we were trying to add any Azure AD user.
ID cannot be specified for Azure Analysis Service role member: firstname.lastname@example.org
The solution was to switch to Integrated workspace and to deploy the model again.
Also make sure, when you want to user Azure AD as Identity Provider, that you user email@example.com and use **Add External