let's suppose I created a used in AAD and I would like this user to be not able to view users that are already in AAD. basically I want to isolate this user from other users so its just a loan user. I have made a group where this user will be stored but this is pretty much everything I did at this point.
1 Answers
You can restrict access to the Azure AD portal to only allow administrator users, but this is a global setting. After enabling this setting, all users will need any administrator role assigned to view the Azure AD directory, the least privileged role would be Directory readers.
See Restrict member users' default permissions
For external guest users, you can set the setting Guest user access restrictions to Restricted access. This is another global setting.
See Restrict guest access permissions in Azure Active Directory
Related