Migrating to Microsoft.Graph

David Downing 701 Reputation points
2022-02-14T20:20:56.493+00:00

I'm in the process of migrating to Microsoft.Graph APIs in my ASP.Net Website. I'm able to authenticate using a Live account, but also need to authenticate to Office 365 accounts and google accounts.

Currently when I attempt to log in using my Office 365 account, I'm getting "Need admin approval" with options: "Have an admin account? Sign in with that account" or "Return to the application without granting consent"

I granted consent from the app registration and it is still failing.

174158-image.png

Are there other permissions I need?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,282 questions
{count} votes

1 answer

Sort by: Most helpful
  1. JamesTran-MSFT 36,596 Reputation points Microsoft Employee
    2022-02-14T23:28:50.557+00:00

    @David Downing
    Thank you for your post!

    Based off your error message Need admin approval, can you see if your user consent settings have been configured correctly?

    1. Sign in to the Azure portal as a Global Administrator.
    2. Select Azure Active Directory > Enterprise applications > Consent and permissions > User consent settings.
    3. Under User consent for applications, select which consent setting you want to configure for all users.
    4. Select Save to save your settings.

    174281-image.png

    Links:
    User is directed to the admin consent flow
    User permissions

    If you have any other questions, please let me know.
    Thank you for your time and patience throughout this issue.

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.