Edit

Share via

Managing user consent to apps in Microsoft 365

  • Article

This setting controls whether users can give that consent to apps that use OpenID Connect and OAuth 2.0 for sign-in and requests to access data. An app can be created from within your own organization, or it can come from another Microsoft 365 organization or a third-party.

If you turn this setting on, those apps will ask users for permission to access your organization’s data, and users can choose whether to allow it. If you turn this setting off, then admins must consent to those apps before users may use them. In this case, consider setting up an admin consent workflow in the Microsoft Entra admin center so users can send a request for admin approval to use any blocked app.

A user can give access only to apps they own that access their Microsoft 365 information. They can't give an app access to any other user's information.

Contact your Global Administrator to edit the user consent policy in the Microsoft Entra portal by following the steps in Configure how users consent to applications.

Related content

Configure the admin consent workflow (article)
Managing consent to applications and evaluating consent requests (article)