I'm facing the issue in API permission

Question

I'm facing the issue in API permission

Sharanagouda 21

Hi Team

I am trying to use postman with Microsoft Graph API by this link https://learn.microsoft.com/en-us/graph/use-postman in that step 3 I'm unable to Grant admin consent, I'm unable to enable (yes) ,please let me know how to resolve

Thanks,
Sharanagouda

Shashi Shailaj 7,626 Reputation points Microsoft Employee Moderator

2022-04-07T15:13:29.267+00:00

@Sharanagouda , You require Global Admin or Privileged Role Administrator role assigned to your user ID in order to enable this. Could you please share the screenshot or the error you are getting?
Sharanagouda 21 Reputation points

2022-04-12T06:22:21.473+00:00

Hi Team,

Please find the attached document bellow document , in my portal permission option is not there ,please let me know how to resolve .

Thanks and Regards
Sharanagouda
CarlZhao-MSFT 46,341 Reputation points

2022-04-12T06:27:53.913+00:00

@Sharanagouda First make sure you are a global admin, then go to Azure AD>App registrations>your app>API permissions.
Sharanagouda 21 Reputation points

2022-04-12T06:43:52.343+00:00

I am followed the same steps as you shared this First make sure you are a global admin, then go to Azure AD>App registrations>your app>API permissions. but I'm unable enable yes option. please find the attached document
CarlZhao-MSFT 46,341 Reputation points

2022-04-12T06:48:12.083+00:00

What role do you have?
Sharanagouda 21 Reputation points

2022-04-12T07:00:47.873+00:00

please find the bellow attached document
CarlZhao-MSFT 46,341 Reputation points

2022-04-12T07:08:45.893+00:00

You are just normal user role, so you cannot grant admin consent. Please contact your administrator to grant you the global administrator role.
Sharanagouda 21 Reputation points

2022-04-12T07:12:01.05+00:00

How I need to know who is my administrator ,in portal any option is there know administrator name?
CarlZhao-MSFT 46,341 Reputation points

2022-04-12T07:25:08.527+00:00

First enter Global administrator in the search bar, then click, it will jump to a list of all users in the tenant who are granted that role. You just need to contact them to grant you Global administrator.
CarlZhao-MSFT 46,341 Reputation points

2022-04-13T02:08:40.877+00:00

Hi @Sharanagouda Is your problem solved? if you still need further assistance, please feel free to post back.
Sharanagouda 21 Reputation points

2022-04-13T06:38:02.723+00:00

I am contacted to our administrator team , they told that administrator access they will not provide access for me because I am a normal user so please let know how I need to resolve this issue.
Sharanagouda 21 Reputation points

2022-04-13T06:40:33.35+00:00

I am contacted to our administrator team , they told that administrator access they will not provide access for me because I am a normal user so please let know how I need to resolve this issue.
CarlZhao-MSFT 46,341 Reputation points

2022-04-13T07:00:19.02+00:00

@Sharanagouda If your admin team cannot grant you the global admin role, then you can only contact your admin team to run the admin consent URL for you, this does not require granting you the global admin role, your global admin will grant admin consent on your behalf. Please refer to my answer for the detailed process.
Sharanagouda 21 Reputation points

2022-04-13T07:25:55.8+00:00

@CarlZhao-MSFT could you please share the steps regarding grant admin consent access
CarlZhao-MSFT 46,341 Reputation points

2022-04-13T07:48:32.027+00:00

@Sharanagouda You just have to ask your global admin to run the admin consent URL in the browser then log in and consent on behalf of the organization. After that, you will be able to see in your application that your permission has been granted admin consent! https://login.microsoftonline.com/{tenant-id}/adminconsent?client_id={client-id}.
CarlZhao-MSFT 46,341 Reputation points

2022-04-13T07:50:32.637+00:00

@Sharanagouda If my answer helped, you can accept it as the answer, thanks a lot!
Sharanagouda 21 Reputation points

2022-04-13T10:04:51.653+00:00

@CarlZhao-MSFT could you please elaborate the steps.
CarlZhao-MSFT 46,341 Reputation points

2022-04-13T10:22:36.757+00:00

Hi @Sharanagouda The process is simple, you just need to contact your global admin and ask him to run the admin consent URL: https://login.microsoftonline.com/{tenant-id}/adminconsent?client_id={client-id} in the browser, then log in and consent.

Accepted answer

0 additional answers

Your answer

Shashi Shailaj 7,626 Reputation points Microsoft Employee Moderator

2022-04-07T15:13:29.267+00:00

@Sharanagouda , You require Global Admin or Privileged Role Administrator role assigned to your user ID in order to enable this. Could you please share the screenshot or the error you are getting?
Sharanagouda 21 Reputation points

2022-04-12T06:22:21.473+00:00

Hi Team,

Please find the attached document bellow document , in my portal permission option is not there ,please let me know how to resolve .

Thanks and Regards
Sharanagouda
CarlZhao-MSFT 46,341 Reputation points

2022-04-12T06:27:53.913+00:00

@Sharanagouda First make sure you are a global admin, then go to Azure AD>App registrations>your app>API permissions.
Sharanagouda 21 Reputation points

2022-04-12T06:43:52.343+00:00

I am followed the same steps as you shared this First make sure you are a global admin, then go to Azure AD>App registrations>your app>API permissions. but I'm unable enable yes option. please find the attached document
CarlZhao-MSFT 46,341 Reputation points

2022-04-12T06:48:12.083+00:00

What role do you have?
Sharanagouda 21 Reputation points

2022-04-12T07:00:47.873+00:00

please find the bellow attached document
CarlZhao-MSFT 46,341 Reputation points

2022-04-12T07:08:45.893+00:00

You are just normal user role, so you cannot grant admin consent. Please contact your administrator to grant you the global administrator role.
Sharanagouda 21 Reputation points

2022-04-12T07:12:01.05+00:00

How I need to know who is my administrator ,in portal any option is there know administrator name?
CarlZhao-MSFT 46,341 Reputation points

2022-04-12T07:25:08.527+00:00

First enter Global administrator in the search bar, then click, it will jump to a list of all users in the tenant who are granted that role. You just need to contact them to grant you Global administrator.
CarlZhao-MSFT 46,341 Reputation points

2022-04-13T02:08:40.877+00:00

Hi @Sharanagouda Is your problem solved? if you still need further assistance, please feel free to post back.
Sharanagouda 21 Reputation points

2022-04-13T06:38:02.723+00:00

I am contacted to our administrator team , they told that administrator access they will not provide access for me because I am a normal user so please let know how I need to resolve this issue.
Sharanagouda 21 Reputation points

2022-04-13T06:40:33.35+00:00

I am contacted to our administrator team , they told that administrator access they will not provide access for me because I am a normal user so please let know how I need to resolve this issue.
CarlZhao-MSFT 46,341 Reputation points

2022-04-13T07:00:19.02+00:00

@Sharanagouda If your admin team cannot grant you the global admin role, then you can only contact your admin team to run the admin consent URL for you, this does not require granting you the global admin role, your global admin will grant admin consent on your behalf. Please refer to my answer for the detailed process.
Sharanagouda 21 Reputation points

2022-04-13T07:25:55.8+00:00

@CarlZhao-MSFT could you please share the steps regarding grant admin consent access
CarlZhao-MSFT 46,341 Reputation points

2022-04-13T07:48:32.027+00:00

@Sharanagouda You just have to ask your global admin to run the admin consent URL in the browser then log in and consent on behalf of the organization. After that, you will be able to see in your application that your permission has been granted admin consent! https://login.microsoftonline.com/{tenant-id}/adminconsent?client_id={client-id}.
CarlZhao-MSFT 46,341 Reputation points

2022-04-13T07:50:32.637+00:00

@Sharanagouda If my answer helped, you can accept it as the answer, thanks a lot!
Sharanagouda 21 Reputation points

2022-04-13T10:04:51.653+00:00

@CarlZhao-MSFT could you please elaborate the steps.
CarlZhao-MSFT 46,341 Reputation points

2022-04-13T10:22:36.757+00:00

Hi @Sharanagouda The process is simple, you just need to contact your global admin and ask him to run the admin consent URL: https://login.microsoftonline.com/{tenant-id}/adminconsent?client_id={client-id} in the browser, then log in and consent.

Answer 1

CarlZhao-MSFT 46,341

Hi @Sharanagouda

This is because you are not a global admin, only an admin can grant admin consent, you need to switch to the global admin login in the Azure portal.

Or you can use the Admin Consent URL, you just need to run that URL in your browser, then have your global admin log in and consent on behalf of your organization, after that you'll see in the API Permissions blade that your permissions have been granted admin consent.

https://login.microsoftonline.com/{tenant-id}/adminconsent?client_id={client-id}

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

CarlZhao-MSFT 46,341 Reputation points

2022-04-11T01:16:05.013+00:00

Hi @Sharanagouda Would you please provide us with an update on the status of your issue?
Sahib dino 0 Reputation points

2025-05-04T21:14:03.76+00:00
Sahib dino 0 Reputation points

2025-05-04T21:19:07.4+00:00

Hello, I'm facing the same issue. All things are working perfectly, but I can't assign the Grant admin consent, and when I hit the button successfully, I'm getting the token, but when I use that token to hit the API, I'm getting this error.

anyone can help me to resolve this error please

Share via

I'm facing the issue in API permission

0 additional answers

Your answer