Error while accessing web app even though added in User & group in Microsoft Entra ID.

Question

I have created a web app and Authentication done using Identity provider as Microsoft. Properties -> Assignment Required field set to "Yes" in Microsoft Entra Admin Center and also added my name in Users & Groups section. But when accessing the web app url i am getting below error,

"needs permission to access resources in your organisation that only an admin can grant. Please ask an admin to grant permission to this app before you can use it."

Please let me know how to resolve this error.

Answer 1

Hi @Anonymous ,

Thanks for reaching out.

I understand that you are trying to access the application but getting error to require Admin consent.

This error usually comes when the application requires one or more permissions which only Global Admin can consent for. There are some permissions for which standard users can provide consent but if the application needs high level permission for example Directory.ReadWrite.All with which any changes can be made to the directory, above message is displayed and only Global Administrator can consent those permissions.

Additionally, you can check for Admin Consent Workflow is disabled in your Enterprise Applications->Consent &Permissions

Reference - https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/configure-admin-consent-workflow

Hope this will help.

Thanks,

Shweta

---

Please remember to "Accept Answer" if answer helped you.