This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 33%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKK%3C/text%3E%3C/svg%3E)
Hi,
I have registered my app on the Microsoft azure portal (app registrations) and want to use Microsoft Graph API.
I had followed the below Microsoft Graph documentation to get Access Token on behalf of the user and use Microsoft Graph APIs further:
https://learn.microsoft.com/en-us/graph/auth-v2-user
Earlier I was able to get Access Token on behalf of all the users to call Microsoft Graph APIs after app registration.
By mistake, I deleted the previous app registration. And now when I have again registered the app, I am able to get the access token only for the users having a personal Microsoft account.
I am not able to get an access token on behalf of the user who wants to authenticate from their organizational Microsoft accounts and create an access token.
I am getting below error when I try to authenticate via my organization account to get access token:
" Need admin approval. This app may be risky. If you trust this app, please ask your admin to grant you access. "
Could you please let me the reason why earlier all accounts were authenticated and access token was generated? But now only personal Microsoft accounts are authenticated and not organisational accounts for access token generation.
Thanks a lot.
Kind regards,
Kanchan
@Kanchan Kumari
Thank you for your question!
Following the documentation that you provided, it looks like the error might be related to Step 4 within the Register a new application using the Azure portal documentation. Can you make sure that you set the proper Support Account Type for your environment.
If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
Hi James,
Thanks a lot for your help.
I am attaching the screenshots as per your request:
Kindly let me know in case you need any further information.
Best regards,
Kanchan
@Kanchan Kumari
Thank you for the quick reply and screenshots! I'm glad that you were able to resolve your issue.
If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
Hi James,
Thanks a lot for your reply and input.
But I would like to mention that I have already selected the option as below but still facing the reported issue:
--> Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox)
Kindly refer the screenshot for the same.
Request you to please help me further to resolve the issue.
Kind regards,
Kanchan
@Kanchan Kumari
Thank you for the quick reply and screenshot! Can you provide the below information so we can further troubleshoot your issue.
The complete Authorize request you're sending, for example:
Your application's API permissions:
Since you're receiving an error message "Need admin approval. This app may be risky. If you trust this app, please ask....", we want to make sure that your permissions match that of your Auth request and that you aren't missing any admin consent options.
If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.
Hi James,
Thanks a lot for your support.
Now the issue is resolved.
Kind regards,
Kanchan