Forum Discussion
Restricting Groups that are shared with apps
One more point to add:
While it is "all or noting" accessing groups in Azure Active Directory & Office Graph, there are permissions you can restrict that are documented here.
https://developer.microsoft.com/en-us/graph/docs/concepts/permissions_reference
Hopefully this will add additional detail useful to you.
Thanks,
Matt
Thanks Matt for the reply.
Unfortunately, this is not going to help in our scenario. Yes, we have restricted what the app can access in our AAD data but we also want to limit the number of users in our side accessing the app for licensing (and other) reasons.
For example, if we have 2 groups with 5 users each and we have only 5 licenses for the app in question, we are thinking if we can allow the 5 users who have licenses be in one group and then share only that group information to be available for that particular app.
Is there a way that we can identify the groups to the app via a custom property or a tag, so that we can discuss how we can specify a way the app can identify a group that is meant for them and to ignore any groups without the said tag?