Microsoft has released the public preview of RBAC for Applications, a method to control the access Azure AD apps have to Exchange Online mailboxes.| Practical 365