# Limit access to groups / UPN

<p class="callout info">For groups to work the Microsoft Entra application will need [Group.Read.All](https://help.abitsystems.com.au/books/service-scheduler-administration-guide/page/register-entra-application "Register Entra application") permission</p>

<table border="1" id="bkmrk-select-settings-loca" style="border-collapse: collapse; width: 100%;"><colgroup><col style="width: 68.9683%;"></col><col style="width: 31.1111%;"></col></colgroup><tbody><tr><td>[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/dElimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/dElimage.png)

</td><td>Start the Service Scheduler install and upgrade wizard</td></tr><tr><td>[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/9bFimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/9bFimage.png)

</td><td>Select settings</td></tr><tr><td>[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/djPimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/djPimage.png)

</td><td>Locate the settings sso\_entra\_allow\_groups and sso\_allow\_upn\_suffix</td></tr><tr><td>[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/Vu9image.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/Vu9image.png)

</td><td>To limit access to certain group, add the group names separated by the ";" character.</td></tr><tr><td>[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/nT6image.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/nT6image.png)

</td><td>To limit to user UPN suffix enter the userPrincipalName suffix</td></tr></tbody></table>