Validate multitenant deamon app access from a security perspective

Question

Scenario

I have Multitenant Azure App registered in my home tenant that is configured as a native client and with a certificate for authentication. Permi