Can you confirm that app has all the perms admin granted for it?
My thought is that either its not been granted or a new permission was requested by the next request.
Approving an Application Consent in Azure AD
Hello,
I'm a little confused with the Approve action for Azure AD app consent. The approval action is defined as "Granting admin consent to the application will add it to your tenant and all users will be able to access it unless you restrict access to the application." However, I have noticed after approving a specific app that if another user requests the same application, a new consent request will be generated. Is this normal behavior?
Thanks,
Diego C
5 answers
Sort by: Most helpful
-
Andy David - MVP 151.1K Reputation points MVP
May 19, 2022, 8:47 PM -
diegotconti 1 Reputation point
May 19, 2022, 10:29 PM Hello Andy and thanks for the reply. I don't know if I understood it correctly but here is an example for one application:
- In the Enterprise Application blade, the app has been consented with the following permissions:
- The same app is pending admin consent for the following permissions which have already been granted:
Thanks,
DC - In the Enterprise Application blade, the app has been consented with the following permissions:
-
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,486 Reputation points
May 20, 2022, 7:45 AM Hello @diegotconti , there are many types of consents experiences, some can replace others, some cannot. The first type that you mention allows a multi-tenant app (an app from another tenant) to be used. This an admin consent. The second type is a consent given by each user for his own personal/delegated permissions. This is a user consent. Both may be required depending on various factors like app permissions, policies, etc. That being said you can save the users from consenting their own personal/delegated permissions granting tenant-wide admin consent to an application.
For more information, please take a look to:
- Understanding Azure AD application consent experiences and sub-sequent docs.
- Configure how users consent to applications and sub-sequent docs.
Let us know if this answer was helpful to you or if you need additional assistance. If it was helpful, please remember to accept it so that others in the community with similar questions can more easily find a solution.
-
Andy David - MVP 151.1K Reputation points MVP
May 20, 2022, 1:12 PM Can you click on the admin consent menu and see if that has been allowed?
-
Andy David - MVP 151.1K Reputation points MVP
May 20, 2022, 10:14 PM Can you consent them under app registrations?
https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/grant-admin-consent#grant-admin-consent-in-app-registrations