Does a Microsoft Copilot Studio native app require admin approval for every user?

Question

Hi,

I am integrating a Microsoft Copilot Studio agent into an internal Python desktop application using the Microsoft 365 Agents SDK and the official Copilot Studio client sample.

The application uses:

• User interactive authentication
• Public Client / Native App registration
• Delegated permissions:
  • CopilotStudio.Copilots.Invoke
    • Microsoft Graph User.Read

When I authenticate, Microsoft Entra displays an "Approval required" screen requesting administrator approval for the application.

My questions are:

1. If an Entra administrator approves the application, is that approval normally valid for the entire organization, so that other users can use the application without requesting approval again?
2. Or does each user need to submit an approval request the first time they use the application?
3. Is there any recommended deployment approach for internal desktop applications using the Microsoft 365 Agents SDK and Copilot Studio to avoid repeated approval requests?

My goal is to distribute this internal application to multiple users within the same Microsoft Entra tenant.

Thanks!