azure active directory – How can I restrict an app to call GET /applications endpoints to list only applications which is OwnedBy this app

How Can I restrict an app to call GET /applications endpoints to list only applications which is OwnedBy this app?

E.g. I have Masterapp called “prd-masterapp” which is being used to create subapp called “prd-subapp”, now If I use prd-masterapp to call GET / applications endpoints this list all the applications in the tenant, I would like to restrict this to list only prd-subapp

Is this possible? Or any reference?

I have checked learn.microsoft.com/en-us/graph/permissions-reference – section “Application.ReadWrite.OwnedBy” but it says with this permission also – it will list all the applications in the tenant.

Is anyone face this kind of challenge? any alternate permission setup? or any alternate solution?