Day: September 22, 2026

For apps accessing directory data (users, groups, apps, service principals), you can assign some directory roles at the scope of an administrative unit (AU) of objects, or at the scope of individual objects.