---
title: "Restrict access to Microsoft Graph application to service accounts only (optional)"
canonical: "https://docs.cuesystem.com/space/M3SG/209387575/Restrict%20access%20to%20Microsoft%20Graph%20application%20to%20service%20accounts%20only%20(optional)"
format: markdown
---
To increase security, it may be helpful to restrict access to the Microsoft Graph application to service accounts only. Other user accounts will then not be able to use the application. You can set the restriction according to this procedure.

> ℹ️ **Repeat **the following procedure **for all service accounts and registered apps **required with respect to the CUE Solution functionality.

- Go to [https://login.microsoftonline.com](https://login.microsoftonline.com+) and log in to your Microsoft 365 administrator account.
- Go to „Admin / Admin centers / Azure Active Directory." Then tap „Azure Active Directory / Enterprise applications".

- Select your application, e.g. "CUE reservation system".
- Click on "Properties" here. Set "User assignment required" to "Yes". Confirm the setting with the "Save" button.
- Now click on "Users and groups" and then on the "Add user/group" button.
- Click on „None Selected". The „Users and groups" window opens on the right. Here, find your service account (s) that you want to enable for the application. You can use a filter for easier searching. Click on your service account and mark it with the „Select" button.
- Now confirm the user addition with the „Assign" button.

This completes the setting of restricting access to the application for service accounts only. 

> ℹ️ It can take several hours for this setting to apply anywhere in the Microsoft 365 environment.

> 📝 If you have multiple service accounts, you can create a mail-enabled security group and set up all service accounts as members. Then select the security group instead of the service account in the appropriate step. We recommend that only experienced Microsoft 365 administrators use this procedure.