On-premises AD has the same functionality but it is a pain to set up and so limited as to be not worth the effort