I wanted to know that how many users and groups we can assign to an enterprise application in Entra ID.

Question

Hello
I wanted to know that how many users and groups we can assign to an enterprise application in Entra ID.

Also what is the limitation of groups to be synced from entra id to the app if SCIM is enabled for it.

Thanks

Answer 1

https://learn.microsoft.com/en-us/entra/identity/users/directory-service-limits-restrictions

Most relevant from that is, under the Applications section:

A user, group, or service principal can have a maximum of 1,500 app role assignments. The limitation is on the assigned service principal, user, or group across all app roles and not on the number of assignments of a single app role. This limit includes app role assignments where the resource service principal has been soft-deleted.

which means that any single object can be directly assigned to a maximum of 1,500 app role assignments (Users and Groups blade on an Enterprise Application). In the service limits article, I don't see mention of a limit on the maximum number of app role assignments that a single application can have linked to it, which matches my understanding that there is not a limit.

For SCIM provisioning of group objects, there is no limit from Entra's end on the number of group objects that can be provisioned into an application.

Answer 2

Hello @Sujeet Kumar Singh

Thank you for posting your query on Microsoft Q&A.

We've confirmed that there's No Limit on the number of users or groups you can assign to an application. Take our Microsoft tenant as an example – we've got apps with thousands of users assigned to them.

You can check in this document: Service limits and restrictions - Azure Active Directory | Microsoft Learn.

https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/assign-user-or-group-access-portal?pivots=portal

I hope this clarifies things. Please contact us if you have any additional questions.If this answers your query, do click Accept Answer and Yes for "Was this answer helpful". And, if you have any further query do let us know.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Best regards,

Sakshi Devkante