Share via

How to give admin consent to Gmail app

IMK 581 Reputation points
2020-10-22T14:53:31.873+00:00

Hi

How can I give admin consent for Gmail app?

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Accepted answer
  1. soumi-MSFT 11,831 Reputation points Microsoft Employee Moderator
    2020-10-23T08:11:03.307+00:00

    Hello @IMK , thank you for sharing the details as this really helps in understanding the user's scenario.

    If a general user fails to consent as the Android Gmail app asks for Admin Consents to proceed further, you can initially login to the Gmail app using an Admin Account (Global Admin preferred) and provide the consent and also check the checkbox that says "Consent on behalf of your organization" (please refer to the screenshot below):
    34572-gmailappandroid-li.jpg

    Once the consent is done, in your Enterprise Registration Section you should be able to find the GMail app and if you check the permissions tab for the Gmail App you should be able to find the Provided Admin Consents. (please refer to the screenshot below):
    34535-gmailpermissions.png

    You can also confirm the same through the audit logs under the Gmail App in Enterprise App Registration.
    34477-gmailauditlogs.png

    Hope the above response helps.

    Do let us know if this helps and if there are any more queries around this, please do let us know so that we can help you further. Also, please do not forget to accept the response as an Answer; if the above response helped in answering your query.

    1 person found this answer helpful.
    0 comments

3 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. IMK 581 Reputation points
    2020-10-23T06:03:28.11+00:00

    Hi

    I haven't done any registrating. User report that when they try to add work account to Android, they receive notice that Gmail needs admin consent.

    So, how to do this? I have read from internet that this is possible but haven't found any instructions on how to do it.

    1 person found this answer helpful.
  2. IMK 581 Reputation points
    2020-10-23T07:23:43.577+00:00

    Hi

    So you don't know what AAD app consent means?

    User, who has Android mobile phone, goes to mobile phone's Settings / Accounts / Add account / Chooses to add Exchange account / Log's in using Microsoft 365 -account with Microsoft Business Premium -license / Submits his user name / gets directed to Microsoft login page / Submits his account password / Receives 2FA txt code and submits code / Gets notice that Gmail App needs admin consent and asks if this user has admin account to login with to give the consent.

    When you go to AAD / Users / User Settings, there is s setting called "App registration" and if this is set to NO, users can't give consent to apps (for apps to login using user credentials and fetch information from users cloud account) but instead, admin's needs to give this consent for apps so that users can use these chosen third party apps, like Gmail app. And this is set to NO for a reason. If you do not understand why this is set to NO, you read following blog post under subtitle "What is the problem".

    https://securityintheenterprise.blogspot.com/2019/11/microsoft-azuread-and-office365-not.html

    Also, when you go to AAD / Enterprise applications / All applications / Choose any app, for example iOS Accounts / Permissions, you can grant admin consent from there to the app.

    The problem is that in our tenant, Gmail app is not present in the list of Enterprise Applications and I can't use the "+ New application" because I can't find Gmail App from that list.

    So, how to give admin consent to Gmail app?

    1 person found this answer helpful.
  3. IMK 581 Reputation points
    2020-10-23T11:00:51.537+00:00

    Hi

    Thanks for answer! This is what I was suspecting that I need to do, just wanted to make sure.

    1 person found this answer helpful.
    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.