Adding extra users to a VM

Dear all,

I have a to build an architecture for a customer where the goal is to provide availability of Microsoft Dynamic AX under Azure as a SAAS application.

My path is to provide a VM hosting the Dynamics AX and then access it from client computer through RDP, as describe in the following link:

http://community.dynamics.com/ax/b/microsoftdynamicsaxintegration/archive/2013/08/13/microsoft-dynamics-ax-2012-in-windows-azure-iaas.aspx

Except mistake from my side as far as I know Server OS provide by default 5 Teminal Service token ( Used by RDP ).

Question 1:

Does in azure RDp token are associated to each users automatically or do we need to provide extra token when needed ?

Question 2:
What is the proper way to add users in order to have access to Dynamics saas and provide deifferent dynamics rights to those users ? for that it is needed to build a domaine controller ?

regards

serge

Your knowledge is enhanced by that of others.