My organisation operate a shared Azure tenant between two separate organisations.
I have a requirement to provide a third party application (working on behalf of just one
