Public search query: how to enroll users in entra global secure access