title: Office 365: Restricting Azure App to set of user
body: <p>We have created an Azure App which is installed by our clients. We have many users assigned Global Admins. The problem is each Global Admin user can see this Azure App. They need Global Admin because of some other reason but all of them do not need to manage that App. I worry about if that Azure App is accidentally modified by any one of those Global Admins and thereby affecting all clients.</p>
  <p>I was looking way to restrict the App to set of users by <strong>User assignment required</strong> settings but have not found any working solution so far.</p>
  <p><a href="https://i.stack.imgur.com/edzWO.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/edzWO.png" alt="enter image description here" /></a></p>
  <p><a href="https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-restrict-your-app-to-a-set-of-users" rel="nofollow noreferrer">https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-restrict-your-app-to-a-set-of-users</a></p>
  <p>Basically, I set <strong>User assignment required?</strong> to Yes for that App and then assign only the required Global Amdin in the <strong>Users and Group</strong> but other Global Admin can still view and edit that App.</p>