title: Users and groups support for Azure AD App Registration
body: <p>Quick question with regards to App registration vs Enterprise applications, in order to control who can access a custom developed application:</p>
  
  <ul>
  <li>When one registers a new app in the App registration blade and
  selects organizational directory only, Azure does not allow to
  restrict this app to a few select users and/or groups within this
  tenant; with this the approach is to solve this within the app, by
  using the exposed claims (groups, app roles, etc.). Correct? </li>
  <li>When one registers the same app by using the Enterprise applications blade,
  the user and groups and also conditional access feature can be used
  in order to restrict who can access the app. Correct?</li>
  </ul>