how to remove admin approval for specific enterprise application

Nofar Aris 0 Reputation points
2023-11-23T09:58:49.7033333+00:00

we(totngo company) created an Oauth application that enable reading outlook meetings of our clients.
when our client do the Oauth authentication they get a screen that ask them to get their admin approval.(see attached image).
we want to help our client to remove the need of admin approval for this specific app ONLY.
their configurations are as in the image.
we tried different things on their side but nothing worked and we keep getting the request for admin approval.
I want to understand what else we can do? do we need to change anything else on the client side? or do we need to change something on the application the we created?

Thanks,
Nofar.
User's image

User's image

User's image

User's image

Microsoft Security | Microsoft Entra | Other
{count} votes

1 answer

Sort by: Most helpful
  1. Vasil Michev 119.5K Reputation points MVP Volunteer Moderator
    2023-11-23T16:52:14.6133333+00:00

    There's nothing you can do here, this is controlled entirely on the client's side. You have already completed your partner verification, which is the only thing I would recommend. Moreover, none of the scopes you seem to be using require admin consent (by default), but that's configurable on the tenant side).

    That said, if your customers are using the settings shown on the first screenshot, it will cause any and all apps to trigger the consent prompt. The settings can be configured per-scope (i.e. allow users to consent to Calendar.Read but not to Calendar.ReadWrite, as an example), but not per app. To get an app "approved", an admin simply grant the admin consent on behalf of the tenant.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.