Manage access through Active Directory security groups. A distribution list is only helpful to a point. Active directory is already used for so many things, having the ability to manage the security ...
More weirdness. When I create an app and publish it, I'm given the chance to specify who should have access to it. I find I can only specify individuals. AD security groups that have been sync'd to Azure AD for our org appear in the drop-down, and I can select and add them. But when I go back and republish the app, and I look at the list of people and groups that have access to it, the security groups are absent! This is exactly the behavior I was seeing (seeing comments below) with data sources. It is either an interface problem or a failure to understand what us users were actually requesting. Not sure which. Maybe both?
