Need admin approval for Notes.Create

Question

I have created an application under App Registrations and added Notes.Create API Permission under microsoft Graph API.

But when I login with my Microsoft Work Account. It is giving error "Need Admin Approval".

How to fix this?

Answer 1

Hello Lovesh Verma,

Thanks for posting!

It seems like the application requires one or more permissions which only Global Admin can consent for. There are some permissions for which standard users can provide consent but if the application needs high level permission for example Directory.ReadWrite.All with which any changes can be made to the directory, above message is displayed and only Global Administrator can consent those permissions. So, you would need to contact Global Administrator to provide consent.

Please refer this detailed article here: https://learn.microsoft.com/en-us/azure/active-directory/develop/application-consent-experience

Also, refer https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/configure-user-consent?pivots=portal

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote. If you have any further questions about this answer, please click Comment.

Answer 2

Hi @Lovesh Verma

The Notes.Create permissions do not require administrator consent, but be careful not to put permissions that require administrator consent into scope.

You can call the following authorization endpoints in the browser to get an authorization code:

https://login.microsoftonline.com/{tenant id}/oauth2/v2.0/authorize?
client_id={client id}
&response_type=code
&redirect_uri={redirect url}
&response_mode=query
&scope=Notes.Create
&state=12345

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.