Fig 1 · The connection1 / 6

Identity Ops Lab

Simulated case · Read-only Graph

Identity OpsExampleApp · Access issueLab UserExampleApp accessTicket openNot checked

Microsoft Entra ID

Your real lab tenant

Entra IDLab UserAccountEnabledGroups2 groupsApp accessNot assignedExampleApp
You, the administratorApprove → Assign in Entra portal
Illustration only · No live operationsRead → Change → Read again

A simulated user cannot access ExampleApp. The ticket enters Identity Ops Lab.

An assignment appearing in the lab is not proof of a successful sign-in. Test the app separately before closing the ticket.