Block and Deny options greyed out in admin consent requests

Jason Yeung 61 Reputation points


I'm currently reviewing the list of admin consent requests for my company. Some requests are fairly old and the requester no longer needs it. So I want to cancel the request. However when I go to the app's details, I notice the block and deny options are greyed out. Only the "Review permissions and consent" option is available.


As the person no longer requires it, I want to deny / block the access. I was wondering how to ungrey these options? Do I need a specific role to do these options?

Currently I have the following roles, most are administrators:
Application Administrator
Billing Administrator
Cloud Application Administrator
Dynamics 365 Administrator
Exchange Administrator
Guest Inviter
License Administrator
Power BI Administrator
Service Support Administrator
SharePoint Administrator
Teams Administrator
User Administrator


Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,447 questions
0 comments No comments
{count} votes

5 answers

Sort by: Most helpful
  1. Dillon Silzer 55,881 Reputation points

    Hi @Jason Yeung

    Try the following roles:

    Global Administrator or Privileged Role Administrator


    If this is helpful please accept answer.

    0 comments No comments

  2. James Hamil 22,981 Reputation points Microsoft Employee

    Hi @Jason Yeung , did the above answer help? You need to at least have the "Privileged Role Administrator" role for this to work. If this doesn't work please let me know and I can help you further.


    0 comments No comments

  3. Arnaud RIGOLE 0 Reputation points


    Did you find the solution ?

    I got the issue with a global administrator account, set in the admin consent settings as reviewer.

    0 comments No comments

  4. JCone-2412 0 Reputation points

    neither of these roles worked for me

    I have Global admin, Privileged Role Administrator, and App Administrator roles assogned, as well as being assigned the reviewer.

    0 comments No comments

  5. Michael Mican 61 Reputation points

    I had this issue aswell - i do think i found out what is happening:

    The requests have a expiry date - I discovered in my demo tenant that as soon as a request expires it still appears as pending in the "All (preview)" tab - so if you were checking this via the All tab this is what might have happened

    0 comments No comments