hardening rest api sas viya

[paterd2]

Viya Experts,

can we block the access to /identities/users and /identities/groups without breaking the applications in sas viya ?

every authenticated user can list all users and groups in our environment.

Or maybe even better are there hardening advices on the rules in sas viya.

Regards,

Dik