Prototype for group-based page access — pick an Entra ID group, then choose which pages that group can open. No per-user sharing: a person gets access by being a member of a group, never assigned individually. Nothing here is enforced yet — this app has no login at all today, so every page is still open to anyone with the URL. This screen exists to work out the access model before building real sign-in + enforcement.
No related wiki article yet.
Showing sample groups/members. Request_UnsupportedQuery: Invalid search request. — Requires the Group.Read.All and User.Read.All Application permissions (Entra ID > App registrations > this app > API permissions > Microsoft Graph), with admin consent granted. Assignments saved against a sample group below will need to be redone once real groups load. Storage is a placeholder too. Saves write to a local JSON file (app/.data/page-permissions.json), same pattern this app already uses for report view counts. That's fine for trying the UI on this machine, but it will not survive an Azure App Service deploy or run correctly across multiple instances — a real backing store (database, Azure Table, or a SharePoint list like the rest of this app's writable data) is needed before this can gate real access.
Entra ID Groups
5
sample data
Pages Registered
30
across 5 sections
Groups With Access Set
0
saved assignments
Entra ID Groups
Select a group on the left to manage its page access.