How to disable group nesting in Microsoft Entra ID
Read OriginalThis article explains how to disable group nesting in Microsoft Entra ID by using the disableNesting property exposed through the Microsoft Graph beta endpoint. It covers why disabling nesting is beneficial for sensitive applications, provides step-by-step instructions for creating a security group with nesting disabled via PowerShell, and demonstrates how to test the restriction. The guide includes required permissions, code examples, and notes on current limitations. Aimed at IT administrators, it helps create clearer membership boundaries and reduce indirect access issues.
Comments
No comments yet
Be the first to share your thoughts!
Browser Extension
Get instant access to AllDevBlogs from your browser
Top of the Week
1
Limit token usage in Microsoft Agent Framework
Jesse Liberty
•
1 votes
2
How to Roll Back AI Agents: Incident Response, Circuit Breakers, and Recovery Patterns
Paul Bryant
•
1 votes
3
Avoiding Reasoning Model Failures with Microsoft Foundry
Luke Murray
•
1 votes
4
When Your AI Agent Lies: Silent LLM Fallbacks
Luke Murray
•
1 votes
5
Adding a custom MCP server to Claude and ChatGPT
Simon Willison
•
1 votes
6
Testing AI prompts and comparing models with promptfoo
Tim Deschryver
•
1 votes
7
Superlogical
Mitchell Hashimoto
•
1 votes