In situations where you have a single tenant but more than one partner each providing a Business Central subscription it seems impossible to restrict one partner to their respective environments.

In our scenario we are the UK partner providing a subscription but in the same tenant the customer also has a Latvian partner providing another subscription for another company in the group. We can separate end user access with Entra ID security groups but its seemingly impossible to separate GDAP Partner Access. For various compliance reasons we would need to have tighter controls over this.

Thanks