Normal users cannot complete OAuth consent for Microsoft Graph Outlook integration in n8n (Admin works) — How to allow non-admin accounts?

Question

Normal users cannot complete OAuth consent for Microsoft Graph Outlook integration in n8n (Admin works) — How to allow non-admin accounts?

Riyas Majeed 20

Hello Microsoft Support Team,

I am trying to configure Microsoft Outlook (Microsoft Graph) OAuth2 authentication in a self-hosted automation platform (n8n) for our organization, but I am facing a persistent permission/consent issue.

Environment

Platform: n8n (Self-hosted)

Authentication method: OAuth2 (Authorization Code Flow)

Microsoft tenant: Microsoft 365 / Entra ID

App type: Single-tenant App Registration

Redirect URI configured correctly in Entra ID:

https://

Ganesh Patapati 12,170 Reputation points Microsoft External Staff Moderator

2026-02-14T16:33:32.07+00:00
Hello Riyas Majeed

I can see you're having a bit of a struggle with getting OAuth consent working for non-admin users in n8n when trying to integrate Microsoft Outlook. Here’s what might help you get through it:

Key Points:

User Consent Settings: It's likely that your tenant's settings are preventing normal users from consenting to applications. Check if the option "Users can consent to apps accessing company data on their behalf" is enabled in the Azure portal under User settings -> Enterprise applications. If it's disabled, non-admin users will not be able to grant consent.

Admin Consent Workflow: You might want to enable the admin consent workflow, which allows users to request admin approval directly from the consent screen. This setup can help streamline the process and provide a way for users to request access to applications that require permissions needing admin consent.

Permission Configuration: Make sure that your application is correctly set up for delegated permissions. Even if admin consent has been granted, users might still face issues if the permissions requested are specifically set to require admin consent.

Scope Validation: Ensure that the scopes your application requests match the permissions that the admin has consented to. If there is a mismatch, users will continue to see the requirement for admin approval.

Suggested Actions:

Verify User Consent Policy: Confirm if the policy for user consent is set to allow users to grant access to apps they use. If not, consider modifying this setting.

Check Application Registration: Ensure that all required permissions are correctly registered in the Azure portal and that they match what's requested during the OAuth flow.

Manage User Assignment Requirement: If User assignment required is enabled for the app, ensure that users are assigned to the application in Azure AD. If this setting is necessary, but users should also have individual access, investigate whether the application can have a different configuration that does not require this.

Follow-Up Questions:

Have you checked the User Consent Policy in the Azure portal to see if users can consent to applications?

Is there an Admin Consent Workflow currently configured for your tenant?

Are you aware of any specific permissions that might be prompting admin consent for the users?

Would you like guidance on how to enable the admin consent workflow or adjust the user consent settings?

If you check these settings and configurations, you should get closer to resolving the permissions issue for non-admin users. Feel free to ask if you have more questions or need further assistance!

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Hello Riyas Majeed,

As discussed offline, the behavior you are seeing is expected due to the Admin consent request workflow configured in your tenant.

When a non-admin user tries to sign in to the Microsoft Graph Outlook integration from n8n, they cannot grant consent directly because the application is requesting permissions that require administrator approval. Since the setting "Users can request admin consent to apps they are unable to consent to" is enabled, users will see an "Approval required" prompt instead of completing the OAuth consent flow.

Only the users configured as reviewers in the Admin consent settings (typically Global Administrators, Cloud Application Administrators, or explicitly assigned reviewers) can review and approve these requests.

User's image

To resolve this, a Global Administrator or assigned reviewer must approve the consent request by following these steps:

Sign in to the Azure portal with a Global Administrator account.

Navigate to Microsoft Entra ID → Enterprise applications → Admin consent requests.
Select the request and click Review permissions and consent.
Review the requested Microsoft Graph permissions.
Click Accept to grant admin consent for the organization.

enter image description here

Once admin consent is granted, non-admin users will be able to sign in and complete the OAuth flow successfully without seeing the approval required prompt.

Hope this helps! Feel free to reach out for further queries.

If this answers your query, do click and Yes for was this answer helpful, which may help members with similar questions.