How Can I Turn Off Admin Approval Requests For One Application in Entra ID?

Question

We have a web application which are working on internally and is hosted in AKS.

We have integrated the login with Microsoft Entra ID, however, every time a user logs in, we get the bellow message:

Is there any way to turn this off for just his particular application?

We are going to have 100's of users logging into this application and it is not ideal that our Entra Admin's will need to approve every single user?

Under the Enterprise Application I have set:

to no avail.

Thanks

Answer 1

Hi @devopsfj

Thank you for posting this in Microsoft Q&A.

I understand that you want to turn Off Admin Approval Requests for One Application in Entra ID.

When your app requests a permission that requires admin consent (by design or admin configuration), your user might see a Need admin approval dialog.

Is there any way to turn this off for just his particular application?

Under User consent settings in the Microsoft Entra admin center, we have option as allow user consent for apps it allows all users can consent for any app to access the organization's data. These settings will be applicable to entire tenant not only particular application.

The best application permissions strategy is to declare all of the permissions that your app might need or request when you register your app. This means that you don't have to request all permissions at the same time, but you should declare them in advance so that admins can select "Grant admin consent for" in your app's configuration in the tenant. Requesting admin consent ahead of time is an excellent choice for line of business (LOB) apps, especially the apps that your organization is developing.

For more information: Requesting admin consent in advance

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.