Restrict Access to Azure Administration Portal Except to App Registration Owners

Question

We enabled Restrict Access to Azure Administration Portal, but not our developers cannot view their own Enterprise applications and app registrations because they do not have an Active Directory administrator role. How can I grant the developers read access to Active Directory so that they can get to their owned applications while still blocking access to the general user base?

Thanks.

Answer 1

Hello @Anon4343 , once the option has been selected (non-admin) users won't be able to access selected portions of the portal unless they're assigned roles with microsoft.directory/servicePrincipals/* and microsoft.directory/applications/* permissions such as Directory Readers which will allow them to read all applications and manage the ones they own (Thanks to [@](/users/na/?userId=8df21f96-00b3-4468-9ab0-920de03d09fc) for mentioning this one).

Also, they can manage their applications through Powershell or directly through the MS Graph API or you can disable the setting and block them for accessing additional resources.

Please let us know if you need additional assistance.