Explanation:
Box 1: Azure AD application
You need first to register your app in AAD, then add users or group to this app so they can used it.
https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app Box 2: An access package in identity governance Users will request access to App1 through the My Apps portal. A human resources manager will approve the requests.
https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management- access-package-create