Hi, Michael.
- Do you mean links in the portal or website links on an Azure Virtual machine, etc? Links aren't something that you can use the Azure Platform to control, and I would argue you shouldn't, it would break a few things, like mail links etc.
I would look into Defender for Endpoint, and RBAC and PIM to make sure that people that DO have access to the Azure Portal only have the access they need.