Govern persona-level access through tenant-bound Entra security groups.
Persona Access
Default deny
Explicit persona authorizationOperation submitters can only use personas granted to an Entra security group bound to their selected virtual tenant. Model and provider settings stay hidden behind the persona boundary.