How to grant admin consent to external application?

Question

How to grant admin consent to external application?

Alex C 0

We hired 2 employees and added them to an external app (GoHighLevel). These employees are trying to link their Outlook calendar to the GHL account but keep getting blocked - see attached image for the message they keep receiving. In Entra, I went into Enterprise Apps > located the app > granted admin consent but the employees are still getting this pop-up. I don't know what to do from here - pleas help!

Screenshot 2026-02-06 104832

VEMULA SRISAI 9,820 Reputation points Microsoft External Staff Moderator

2026-02-06T21:09:24.2333333+00:00
Hello Alex C,

Granting Admin Consent in Enterprise Applications alone may not fix this issue because the app your employees are using (GoHighLevel) requires per‑user delegated consent the first time each user tries to connect their Outlook/Calendar.

Even if the tenant admin has already granted org-wide admin consent, users can still be blocked if:

User consent is disabled in the tenant

Check in Entra ID: Entra ID → Identity → Applications → User settings → User consent settings Make sure “Users can consent to apps accessing their data” or “Allow user consent for verified apps” is enabled.

A Conditional Access policy is blocking OAuth consent

If you have CA policies that require:

MFA

Compliant device

Hybrid join

App enforced restrictions the OAuth prompt for GoHighLevel might get blocked.

Ask the users to check My Sign-ins → Conditional Access for any blocked event.

3.To grant tenant-wide admin consent to an app listed in Enterprise applications pane:

Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.

Browse to Entra ID > Enterprise apps > All applications.

Enter the name of the existing application in the search box, and then select the application from the search results.

Select Permissions under Security.

Carefully review the permissions that the application requires. If you agree with the permissions the application requires, select Grant admin consent.

For your reference:

https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent?wt.mc_id=knowledgesearch_inproduct_azure-cxp-community-insider&pivots=portal
Alex C 0 Reputation points

2026-02-06T21:17:45.5566667+00:00

Hello - thank you for that information. I've already completed #3. When I tried to complete #1, I don't see "Identity," this what I see:

For #2, can you clarify where the user would sign-in to see that information? I also meant to add - we have several other employees with a user account in GHL and they were able to connect their Outlook calendar to GHL. It's only these 2 recently hired employees that are experiencing the issue.
VEMULA SRISAI 9,820 Reputation points Microsoft External Staff Moderator

2026-02-18T03:31:13.3533333+00:00

Alex C Since admin consent is already granted, the issue is likely due to user consent being restricted or a Conditional Access policy applying to the new users only. Existing users already consented earlier, so they aren’t prompted again. Please check Entra ID → Enterprise applications → Consent and permissions → User consent settings, and have the affected users review failed sign‑ins at https://mysignins.microsoft.com for any CA blocks.
Alex C 0 Reputation points

2026-02-18T21:05:38.53+00:00

I checked Entra ID → Enterprise applications → Consent and permissions → User consent settings and I don't think I have the right permissions to make changes in here. This is what it looks like for me:
VEMULA SRISAI 9,820 Reputation points Microsoft External Staff Moderator

2026-02-18T21:12:41.2466667+00:00

Alex C From the screenshot, it appears you don’t have sufficient permissions to modify User consent settings. This setting can only be changed by a Global Administrator or Cloud Application Administrator. You’ll need to ask a tenant admin to either update the consent configuration or assign the required role to you.
Alex C 0 Reputation points

2026-02-18T21:17:00.0666667+00:00

From my screenshot, which option should be enabled for user consent?
VEMULA SRISAI 9,820 Reputation points Microsoft External Staff Moderator

2026-02-18T21:21:32.2766667+00:00

Alex C Please select the admin consent settings option.