Need help with "Grant admin consent for Microsoft"

Question

Need help with "Grant admin consent for Microsoft"

Muralidhar Tanneeru 40 Microsoft Employee

Hello,

I have created an API with name "Bug Analysis Graph API". I don't see "Grant admin consent for Microsoft" enabled. I also notice that "Security" option isn't showing up in the left side panel options - where I see "Overview", "Quickstart", "Manage" etc.

Regards,

Murali

VEMULA SRISAI 13,890 Reputation points Microsoft External Staff Moderator

2025-11-11T05:42:31.5933333+00:00
Hello Muralidhar Tanneeru,

If you're not seeing the "Grant admin consent for Microsoft" option or the "Security" tab in your app registration ("Bug Analysis Graph API"), here are a few things to check:

A Microsoft Entra user account with one of the following roles:

Privileged Role Administrator, for granting consent for apps requesting any permission, for any API.

Cloud Application Administrator or Application Administrator, for granting consent for apps requesting any permission for any API, except Microsoft Graph app roles (application permissions).

A custom directory role that includes the permission to grant permissions to applications, for the permissions required by the application

API Permissions Missing Go to Manage > API permissions and verify that permissions are added. The "Grant admin consent" button only appears when permissions are present.

Service Principal Not Created If the app registration doesn’t have a service principal, some options like "Security" won’t show.

Please refer the source document for more information: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent?pivots=portal#prerequisites

Answer accepted by question author

Rukmini 43,905 Microsoft External Staff Moderator

Hello Muralidhar Tanneeru,

Granting admin consent to Application type API permissions require Privileged Role Administrator or Global Administrator role assigned to the user account.

In your scenario, you have Cloud Application Administrator and you are the owner of the app and still you cannot grant Admin consent to the User.Read.All application type API permission because as mentioned in this Microsoft Document, Cloud Application Administrator can grant consent requesting any permission for any API, except Microsoft Graph app roles (application permissions).

User's image

Hence you need to contact your Global Admin and assign Privileged Role Administrator to grant admin consent for Microsoft Graph app roles (application permissions).

Hope this helps!

If the resolution was helpful, kindly take a moment to accept the answer and upvote it 👍 it as a token of appreciation.

0 comments

1 additional answer

Your answer

VEMULA SRISAI 13,890 Reputation points Microsoft External Staff Moderator

2025-11-11T05:42:31.5933333+00:00

Hello Muralidhar Tanneeru,

If you're not seeing the "Grant admin consent for Microsoft" option or the "Security" tab in your app registration ("Bug Analysis Graph API"), here are a few things to check:

A Microsoft Entra user account with one of the following roles:

Privileged Role Administrator, for granting consent for apps requesting any permission, for any API.

Cloud Application Administrator or Application Administrator, for granting consent for apps requesting any permission for any API, except Microsoft Graph app roles (application permissions).

A custom directory role that includes the permission to grant permissions to applications, for the permissions required by the application

API Permissions Missing Go to Manage > API permissions and verify that permissions are added. The "Grant admin consent" button only appears when permissions are present.

Service Principal Not Created If the app registration doesn’t have a service principal, some options like "Security" won’t show.

Please refer the source document for more information: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent?pivots=portal#prerequisites

Answer 1

It seems that you are experiencing issues with the "Grant admin consent for Microsoft" option not being enabled for your API, as well as the absence of the "Security" option in the left panel. Here are a few things to consider:

Permissions and Roles: Ensure that you are signed in with an account that has the necessary permissions to grant admin consent. Typically, you need to be a Privileged Role Administrator or have similar administrative privileges.
Tenant Settings: If your organization has disabled the ability for regular users to grant consent, only admins will be able to do so. You might want to check the settings in the Azure portal under User settings for Enterprise applications to see if this capability is disabled.
API Registration: Make sure that your API is properly registered in the Azure portal and that you have added the necessary permissions to it. If the API is not fully configured, certain options may not be available.
Refresh the Portal: Sometimes, the Azure portal may not reflect the latest changes immediately. Try refreshing the page or logging out and back in to see if the options appear.

If you continue to face issues, consider reaching out to your Azure administrator or support for further assistance.

References: