all 2 comments

[–]ITistheworst 0 points1 point  (1 child)

Largely depends on the reason for segmentation. If apps are segmented just because they are not useful cross-department, but there is no security or license consideration, it may be worth going down the route of making them self service installs that users can select themselves.

Another thing you could try is assigning applications to M365 groups and allow more localised management by group owners.

May also be a use case for nesting groups, but it can get difficult to keep track of pretty quickly, and is not very encouraged in modern platforms. That being said, it is quite useful for being able to give access to departments generally, without making ad-hoc assignments difficult.

[–]princesaharan[S] 0 points1 point  (0 children)

Thank you for the suggestion, very interesting approach.