A customer made me a co-administrator of his Azure subscription. However, I am unable to edit his Active Directory, ie add/edit users, create applications, etc.
Why
The answer was that I needed to be set up as a Global Administrator in the Azure AD domain.