thank you Mavhc
we have followed https://docs.microsoft.com/en-gb/mic...tion-of-groups and created groups. it is the group it has. security group or office365 groups we created and applied the PowerShell. still blocked all user including global user. I have spoken Microsoft (still investigating)
what you are saying is i need to create a security group in Azure add users not in AD (local) or office365 and apply the restriction PowerShell to this group. is that right? this i have not tried