We have our hosted Azure DevOps instance connected to our Azure AD, and within Azure DevOps we have 175 users setup as Stakeholders or Basic users.
I would expect that within DevOps that the list of users to be able to assign Tasks to, or when @ mentioning someone it would be limited to the 175 authorized users, but in both cases, those lists search our entire Active Directory. Are we missing a setting somewhere that would limit users to those authorized for DevOps, or do we just have to live with being able to @ mention people who don't have access to DevOps, or attempts to assign tickets to those that don't have access?