Question 105312 in Azure Question posted in
The official documentation to get you started can be found here.

Azure – How to allow app registration to be accessed only by specific user or group?

I’m exploring azure app registration and when creating this it asks me to choose either of following options. Is there a way to allow only a specific user or user group to access this app registration?

enter image description here

Tags:

2

Answers


  1. 0

    Using Role-based access control (RBAC) we can set specific permissions to specific users or groups to access and manage resources.

    Thanks to @Alex Simons , check the below workaround to restrict the access only for specific user or group.

    In Azure AD, Create a Custom Role

    Navigate to Azure Portal => Azure AD => Roles and administrators => New custom role

    enter image description here
    Add the name and description for the Custom Role.
    In Permissions tab, search with credentials keyword

    • If you want to restrict a specific user, select below Permission
    microsoft.directory/applications/credentials/update

    OR

    • If you want to restrict user group, select below Permission
    microsoft.directory/applications.myOrganization/credentials/update

    and click on Create to create new custom role

    enter image description here

    • We need to assign the created custom role to the app which we want to restrict the users.

    • In Azure AD => App registrations => Select your App => Roles and administrators, here you can see the custom role which you have created
      enter image description here

    • Click on the newly created custom role => Assignments => Add Assignments.Select the user and click on Add.
      enter image description here

    • When I tried to access the Application with the Account which is not given permission, I got the below error

    enter image description here

    and able to access the application which I have given permission without any issues

    OutPut :
    enter image description here

    Login or Signup to reply.
  2. 0

    I think the best solution would be to follow the steps from this post: https://edi.wang/post/2019/12/13/how-to-allow-only-selected-users-to-access-an-application-in-azure-ad.

    Quick summary of the steps after creating the app registration:

    1. Go to Azure AD -> Enterprise applications -> YOUR APP -> properties
    2. Select Assignment required -> Yes
    3. Go to Azure AD -> Enterprise applications -> YOUR APP -> Users and Groups
    4. Select the Users and Groups who should be able to login into your app

    Cheers

    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search