Native Azure - Self registration tool, AD provisioning

I need folks to be able to add themselves to my AD in a certain predefined OU / group (administrator should be able to change that group) When a user appears in that group (after all checks/balances/password checks etc) this user should be created in Brivo(A access control environment, ran from the cloud) After that the user is live.
Native Azure is a must have. I need guidance on further setting up my local/Azure AD and Infrastructure in