Use cloud groups for new cloud app authorization
Overview
Assign Entra ID security groups to new cloud applications. This way, you don't increase your on-premises active directory footprint and allows you to streamline identity governance features such as access reviews and access packages, which are foundational to drive least privilege.