A ferry-booking SaaS appeared in the tenant and every employee can launch it from My Apps. What should the security engineer configure on that enterprise application so only the booking group can use it?
Select an answer to reveal the explanation.
Short Explanation
If the ferry app is open to the whole dock, flip “assignment required” and hand boarding passes only to the booking group. Until that switch is on, My Apps is basically a public pier for that app.
Full Explanation
Enterprise applications support a user assignment required property. When enabled, only users or groups explicitly assigned can sign in or see the app in My Apps. Assignment without that property still leaves the app available more broadly depending on how it is configured. Application Proxy publishes on-premises apps and is not the control for assignment gating. Entitlement Management access packages are an SC-300-style governance feature outside this AZ-500 enterprise-app assignment focus, and Azure RBAC Owner does not gate My Apps launches.