Consent workflow

ABDUL-SHAHIED SHAHID 21 Reputation points
2022-07-21T13:27:47.28+00:00

I have configured admin consent workflow following this documentation but it's not working for me. When Non admin users want to give consent they are still able to see below form:

223060-need-approval.png

I want to make non admin user enable to see below form or something similar to that.

223145-req-approval.png

I have also tried this documentation but didn't work.

Any kind of solution or help is highly appreciated.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. AmanpreetSingh-MSFT 56,951 Reputation points Moderator
    2022-07-22T07:33:37.623+00:00

    Hello @ABDUL-SHAHIED SHAHID • Thank you for reaching out.

    The "Approval reqiured" page is presented to the users in the below cases:

    1. If the user consent settings are configured to Allow user consent for apps from verified publishers, for selected permissions (Recommended) but the application is either not from verified publishers or any of the permissions in the authentication request is not added under Azure Active Directory > Enterprise applications > Consent and permissions > Permission classifications under Low (low risk permissions) tab. You can try to set the User consent settings to Allow user consent for apps and see if it works, to confirm the same.
    2. If the delegated permissions require Admin consent only and cannot be consented by the users. However looking at the above screenshot, the scopes being used are user.read, calendars.read, calendars.read.shared, and offline_access. I confirmed that none of these scopes require admin consent. I would suggest you validate the authentication request url and check if the scopes parameter contains any other scope than the 4 scopes I mentioned.

    Feel free to tag me in your reply if you have any further questions.

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.