application security

Question

How do I restrict a Entra application to specific data?

Answer 1

To restrict a Microsoft Entra application to specific users or services, you can configure the application to require user assignment. This means that only users or services assigned to the application will be able to sign in or obtain an access token. Here are the steps to do this:

1. Sign in to the Microsoft Entra admin center.
2. Navigate to Enterprise apps > All applications.
3. Select the application you want to configure.
4. On the application's Overview page, under Manage, select Properties.
5. Locate the setting Assignment required? and set it to Yes.
6. Save your changes.

When you set the application to require assignment, user consent for that application is not allowed, ensuring that only assigned users can access it. Additionally, you may also consider using Azure role-based access control (Azure RBAC) for more granular access control.

---

References:

• Restrict a Microsoft Entra app to a set of users
• Update the app to require user assignment