Azure SQL DB DACPAC task in DEvOps does not support AD authentication with a SErvice Principal
The only way to deploy to Azure SQL DB using the DACPAC task in Azure Devops is to use SQL Login Authentication. Microsoft Integrated authentication does not work despite the options being available (perhaps because it's connecting to Azure SQL DB and not Managed Instance or Enterprise).
This means I have to add user security groups manually to my Azure SQL DB rather than in a DevOps task.
Paulo Correia commented
This should've come out of the box.
Already lost AAD users in SQL Database due to this!