I need admin approval, but its my business. How can I obtain global permissions

Question

I need admin approval, but its my business. How can I obtain global permissions

Danny Phillips 0

I am trying to install Spark Mail on my iPhone but it says "Need Admin Approval" It is my business, I have no employees and I should have global permissions. How can I get full permissions so I can sign in?

My phone is an iPhone17

Moved from: Microsoft 365 and Office | Access | For business | Other

0 comments

2 answers

Your answer

Answer 1

Dear @Danny Phillips,

Welcome to Microsoft Q&A.

Based on the details you shared, it appears that Spark Mail is requesting permissions that require an Admin Approval in Microsoft 365. Even though your business has no employees, Microsoft still treats all app‑permission requests as organizational access, which means only the Global Administrator of the tenant can approve them.

However, in order to grant that approval, you must first be able to sign in as the Global Administrator in the Microsoft 365 Admin Center. Without access to the admin portal, Microsoft 365 cannot recognize that you are the admin and that is why Spark Mail keeps showing the “Need admin approval” screen.

When you sign in on the iPhone using a normal user account, Microsoft blocks apps that request elevated permissions. This is expected behavior for security reasons. To approve Spark Mail, the system needs confirmation from the Global Admin role, not from a standard user account.

Before approving Spark Mail, you must regain access to the Microsoft 365 Admin Center here: https://admin.microsoft.com

If you cannot sign in (for example due to MFA issues, password issues, or uncertainty about which account is the true admin), then Microsoft requires identity verification before allowing you to proceed.

Sign in using the original Global Admin account created when you first subscribed to Microsoft 365 Business. Once you are successfully logged in as the Global Administrator, you can approve the Spark Mail permissions request normally.

As a moderator, I’m not allowed to view your tenant details or perform any account actions on your behalf, and I also cannot verify ownership of your business. I hope you can understand these limitations, only Microsoft Support can verify and restore admin access when needed.

If you currently cannot access the Admin Center. Then the next step is to contact Microsoft Support so they can help you regain access to the Global Admin account. After your admin access is restored, you will be able to approve Spark Mail instantly.

Please try to find the related hotline number to call the frontline let them raise a ticket for you: Customer service phone numbers - Microsoft Support

In some countries, this is an automated conversation: First, when you call the hotline, they will ask you what kind of problem you are struggling with.

Answer: Authenticator.

A: What products do you use?

B: Office 365 for business.

Verification: Education or company account?

B: For companies

A: Are you an administrator?

B: Yes.

A: Are there any other administrators in your organization?

B: No.

A: I need one.... Service request?

B: Yes

If your organization's Office 365 Business/Education subscription is from a partner or reseller, and the global administrator is unable to open a service request on your end, contact the reseller's support provider to help open a service request on behalf of you instead.

If you still cannot reach to agent, there is still a workaround, you might consider registering for a new tenant by signing up for a trial subscription via this link Compare All Microsoft 365 Plans | Microsoft. This would allow you to create a new tenant following the provided prompts. Once set up, you can access the admin console of the new tenant and submit a support ticket requesting to speak with the Data Protection team on behalf of your previous tenant.

Please remember to cancel the trial subscription once your issue is resolved to avoid any unintended charges.

I understand that this entire process can feel long and complicated, and I truly appreciate your patience while working through it. These steps are in place to protect the security of your account, so I hope you can understand why they are required. I sincerely hope you’ll be able to regain access to your account soon. If you need help at any point, or if you have any questions during the process, please feel free to reach out, I’m always here and happy to assist.

Thank you again for your understanding and patience.

Warm regards,

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Liora D 15,290 Reputation points Microsoft External Staff Moderator

2026-02-02T13:02:07.1366667+00:00

Hi @Danny Phillips,

I just wanted to follow up to see how things are going with the information I shared above. I truly hope it was helpful and brought you closer to resolving the issue.

If you’ve had a chance to review it and have any updates, questions, or if you ran into any difficulties along the way, please don’t hesitate to let me know. I’m more than happy to assist further if needed.

It would be great to hear back from you!

Warm regards,

Liora.
Danny Phillips 0 Reputation points

2026-02-02T19:31:07.5033333+00:00

Unfortunately this hasn’t helped. I am the global admin for my email address and I’m locked out due to lost MFA with no backup methods or SSPR enabled I need Microsoft to reset my MFA and restore my admin access but it’s proving to be very difficult.

I can still sign in with my password but Microsoft 365 treats me as a restricted user because MFA cannot complete. As a result I cannot access the Microsoft 365 Admin Centre or any admin level pages including the support request portal. Every admin URL returns switch to an account that has permission. I’m in a loop. A super loop!!.
Liora D 15,290 Reputation points Microsoft External Staff Moderator

2026-02-03T13:14:42.0633333+00:00

Hi Danny Phillips,

Thanks for the clear update, and I’m really sorry you’re stuck in that MFA super loop. What you’re seeing is expected security behavior in Microsoft Entra ID: until the tenant recognizes a fully authenticated Global Administrator, permission‑gated apps like Spark Mail will keep showing “Need admin approval.” The fix is to restore Global Admin sign‑in first, then approve the app.

What reliably gets you out of the loop

Ask Microsoft Support to verify tenant ownership and reset MFA / issue a Temporary Access Pass (TAP).

Use the Global Customer Service phone numbers page to reach the correct regional team and open a business support case. Tell the agent you’re the sole Global Admin and are locked out due to lost MFA without SSPR/backup; request MFA reset or TAP to regain admin access.

• If they need domain proof, they’ll ask you to add a short‑lived TXT record at your DNS to verify ownership (this doesn’t affect mail flow).

• TAP is a time‑limited code designed exactly for this kind of recovery (sign in once, then re‑register strong auth).

After you’re back in, I strongly recommend enabling Temporary Access Pass for admins and maintaining at least two independent Global Admin accounts with two registered MFA methods each. TAP is documented here and is the cleanest break‑glass path if a device is lost again.

I hope this helps you exit the loop quickly. Once your admin access is restored, the Spark Mail approval takes just a minute. If any of the steps are unclear, I’m happy to adjust them to your exact setup.

Answer 2

AI answer

To resolve the "Need Admin Approval" issue when trying to install Spark Mail on your iPhone, you will need to obtain admin consent for the application. Even if it is your business, certain permissions may require admin approval, especially if the application requests access to resources that are managed under Microsoft 365.

Here are the steps you can take:

Sign in as a Global Administrator: If you are the owner of the Microsoft 365 account, ensure that you are signed in with a Global Administrator account.
Grant Admin Consent: Navigate to the Microsoft Entra admin center. Go to Identity > Applications > Enterprise applications > [Your App] > Permissions. From there, click on Grant admin consent for [Your Organization] to approve the requested permissions.
Check Required Permissions: Make sure that all required permissions for Spark Mail are granted. If new scopes were added after the initial consent, you may need to re-grant consent.

If you continue to face issues, you may want to check the official Microsoft documentation or reach out to Microsoft support for further assistance.

References:

AI-generated content may be incorrect. Read our transparency notes for more information.

Share via

I need admin approval, but its my business. How can I obtain global permissions

2 answers

Your answer