BC Friday Tips #31 Block Users using Security Group

Environment-level security groups in Azure AD restrict access to Business Central instances by allowing only group members to sign in. This approach works for both production and sandbox environments.

Key points

Create an Azure AD security group and add only authorized users to it
Assign the security group to the environment in BC Admin Center
Restart the environment to enforce access restrictions
Useful for blocking most users or restricting sandbox access to testers only

Quotes

“Now, only members of the group can sign in.” (This demonstrates the core benefit: environment access is effectively restricted to group members only.)
“This can also be used to restrict sandbox access to testers only.” (Shows a practical use case for the feature beyond just blocking users.)

Context

Features: environment-level security groups, user access restriction, Azure AD integration

Source: That NAV Guy, community blog. Summary, key points and quotes are derived (CONTENT-NOTICE.md); read the original for the full text.