Blocking App Registration for Users in Azure

Question

How can app registration be blocked for users in an Azure environment without affecting existing applications? Currently, users have permission to register new applications, but there is concern about the impact on applications that are already registered. Any guidance would be appreciated.

Answer 1

Hello Catarina

To block app registration for users in an Azure environment without affecting your existing applications, you can follow these steps:

1. Disable User App Registration:
   • Sign in to the Microsoft Entra admin center.
   • Navigate to Identity > Users > User settings.
   • Set the Users can register applications setting to No. This will prevent users from registering new applications.
2. Delegate App Registration Permissions:
   • Assign the Application Developer or Application Administrator roles to specific users who need to manage app registrations. This ensures that only authorized users can register new applications while existing applications remain unaffected.

By following these steps, you can control who can register new applications without disrupting the functionality of existing ones. If you need more detailed instructions or have specific requirements, feel free to ask!