Secure access for your workforce with the Microsoft Entra Suite

Currently if you create multiple Enterprise Applications for Private Access and assigning users to these applications the access is correctly applied - users not assigned to one Enterprise Applications are restricted from using these Private Access resources - but as the client always gets ALL Private Access destinations this leads to two unwanted effects 1) you expose the whole Private Access infrastructure to all your clients 2) users are ALWAYS unable to access these applications even if they would be able to reach them while within your company - for example if you want to "publish" an app to some users on the road but not all Are there plans so the client only gets the Enterprise Application Private Access settings they are assigned to so you are able to set up different access profiles without interfering between user groups?