Leverage User and Group Assignments to Limit User Access to Apps

User and Group assignments can be added to Entra ID applications. Once assignments exist for an application, only assigned users can access that application. This method is a good way to secure access to applications that have consent to use high-profile permissions like Sites.FullControl.All or Mail.Read. Microsoft 365 tenants should consider how to use assignments to control user access to applications.

https://office365itpros.com/2026/04/10/user-and-group-assignments/