Plugin: Azure: adapt order for role verification to have first admin, then teacher to avoid setting a teacher role to an admin - refs BT#21500

plugin/azure_active_directory/src/callback.php

@@ -97,10 +97,9 @@ try {
 
         $azureGroups = $provider->get('me/memberOf', $token);
 
-        foreach ($azureGroups as $azureGroup) {
-            $azureGroupUid = $azureGroup['objectId'];
-
-            foreach ($roleGroups as $userRole => $groupUid) {
+        foreach ($roleGroups as $userRole => $groupUid) {
+            foreach ($azureGroups as $azureGroup) {
+                $azureGroupUid = $azureGroup['objectId'];
                 if ($azureGroupUid === $groupUid) {
                     $roleActions[$userRole]($user);