Need admin approval error with users from another organization.

Question

I'm configuring an app in my organization to allow users to log in through external accounts (both personal and organizational) to access their data through the Microsoft Graph API. Additionally, the "other organization" refers to another account that I have created to run some tests.

I have configured the app as multi-tenant.

And give the following permissions(I already tried to give the consent but it didn't work):

With the admin account from the organization i can do the consent process, but with other "normal" accounts from the organization i keep having the same error:

My App as the status "Publish verified"

I have made some searches and found this link: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent?pivots=portal#grant-tenant-wide-admin-consent-in-enterprise-apps-pane

But it's not very clear for me, i follow the steps and tried to consent the admin flow with my organization account and the external organization account, but i keep receiving the same error: "need admin approval".

Answer 1

Application perms would be really bad here. You prob want the scope set to delegated so users can only access the calendars they already have access to.

If users are logging onto your app as themselves , then I would expect your app to request delegated permissions, not application.

https://learn.microsoft.com/en-us/entra/identity-platform/permissions-consent-overview