how to provide app permission consent to use Microsoft Graph APIs and Azure cost management APIs all read access? Also Which role is required to provide consent with lease privileges?.

Question

how to provide app permission consent to use Microsoft Graph APIs and Azure cost management APIs all read access? Which role is required to provide consent with lease privileges?.

I know we can provide the admin consent using Global Administrator, but is there any alternate to provide consent with lease privilege roles.

for Powershell automation script admin consent is required use the provided permissions below in snap.

Thanks

Answer 1

Hi @Anil Guliyaan

Thanks for reaching out to Microsoft Q&A

All the permissions that need to be consented by an Admin will need to be consented either by the GA or by using an Admin consent workflow.

The admin consent workflow gives admins a secure way to grant access to applications that require admin approval. When a user tries to access an application but is unable to provide consent, they can send a request for admin approval. The request is sent via email to admins who have been designated as reviewers. A reviewer takes action on the request, and the user is notified of the action.

The documentation below has more information about how to create such consent flow:

https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/configure-admin-consent-workflow

Let me know if you have further questions or if I misunderstood your request.

Thanks,

Fabio

Answer 2

Hi @Anil Guliyaan

I just wanted to check in and see if you had any other questions or if you were able to resolve your issue.

If you have any other questions, please let me know.

Thanks,

Fabio

Answer 3

Hi @Anil Guliyaan

I just wanted to check in and see if you had any other questions or if you were able to resolve your issue.

If you have any other questions, please let me know.

Thanks,

Fabio