Plugin: Azure: adapt order for role verification to have first admin, then teacher to avoid setting a teacher role to an admin - refs BT#21500

plugin/azure_active_directory/src/callback.php

@@ -97,10 +97,9 @@ try {
 
         $azureGroups = $provider->get('me/memberOf', $token);
 
+        foreach ($roleGroups as $userRole => $groupUid) {
             foreach ($azureGroups as $azureGroup) {
                 $azureGroupUid = $azureGroup['objectId'];
-
-            foreach ($roleGroups as $userRole => $groupUid) {
                 if ($azureGroupUid === $groupUid) {
                     $roleActions[$userRole]($user);