Forum Discussion
Restrict access to Microsoft Entra admin center
- Jul 31, 2025
View only access to basic directory data is impossible to restrict, so blocking access to the admin tools is your best option if that's your goal. For Groups they own, users can use the MyGroups portal and/or OWA. For app-related operations, it depends on which operations you want to allow for them, but in general there is no way to prevent them from seeing additional data if you allow them to manage apps via the portal.
View only access to basic directory data is impossible to restrict, so blocking access to the admin tools is your best option if that's your goal. For Groups they own, users can use the MyGroups portal and/or OWA. For app-related operations, it depends on which operations you want to allow for them, but in general there is no way to prevent them from seeing additional data if you allow them to manage apps via the portal.