Admins see every app and this settings panel. Members see only the apps you tick. Jeremy Gagnon is the owner and is always an admin.
When published behind Cloudflare Access, the org's Microsoft 365 login is recognized automatically — no Client ID needed. The Client ID above is only for standalone in-app MSAL sign-in. Client ID and Tenant ID are not secrets.