Share via

Secure Score - Do not allow users to grant consent to unreliable applications

Michael Bennett 51 Reputation points
2022-09-14T15:20:08.207+00:00

In regards to the recommendation from Secure Score "Do not allow users to grant consent to unreliable applications" will removing user consent and replacing with Admin Only cause previously administered user consent to be regressed and lost?

Alternatively, will the consent be maintained?

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments

Answer accepted by question author

  1. Andy David - MVP 160.2K Reputation points MVP Volunteer Moderator
    2022-09-14T15:25:28.827+00:00

    Any existing admin and/or user consent should remain. If the app was not consented by an admin previously and you no longer allow automatic user consent, any future consent requirements for that app and any new app will require an admin to consent for the org.
    Consider also the admin consent workflow enabling:

    https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/configure-admin-consent-workflow

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.