Learning and Sharing
  • Home
  • Blog
  • Linux
  • macOS
  • Virtualization
    • VMware
    • VirtualBox
  • Windows
    • Windows 11
    • Windows 10
    • Windows Server
  • Series
    • Symantec
    • Intune
    • Microsoft Azure
    • Powershell
    • VirtualBox
    • VMware
    • PowerShell Learning
    • Microsoft Graph
  • More
    • Auto Installation
    • AEC Installation
  • Contact
No Result
View All Result
  • Home
  • Blog
  • Linux
  • macOS
  • Virtualization
    • VMware
    • VirtualBox
  • Windows
    • Windows 11
    • Windows 10
    • Windows Server
  • Series
    • Symantec
    • Intune
    • Microsoft Azure
    • Powershell
    • VirtualBox
    • VMware
    • PowerShell Learning
    • Microsoft Graph
  • More
    • Auto Installation
    • AEC Installation
  • Contact
No Result
View All Result
No Result
View All Result

How to Grant Admin Consent to Applications in Entra ID

August 30, 2023
in Blog, Entra ID
0
ADVERTISEMENT

Table of Contents

In this post we look at how to set up the admin consent workflow in Entra ID, which fixes an issue with the BlueMail app requiring admin consent, giving users a way to request access to applications and allowing global admins the ability to grant tenant-wide consent.

Recently, in my organization users reports receiving a approval message appears when attempting to access mail through the BlueMail application. Users wondering about the Accept option and they ask us to be confirm it wouldn’t be an issue if they Accept it.

GOmK4o7DGjJ8wMaurBpIiUoqfw9pMCigiJPO4PxOaEQe44Ek1bB0bOOjj709

So, the first thing we checked out was the Enterprise application in Azure Active Directory just to do a once-over of the settings there. However, there was no BlueMail app to be found!

We then spoke to Microsoft support who recommended configuring the admin consent workflow (preview), which gives end users a way to request access to applications that require admin consent.

Configure the admin consent workflow

There is full documentation from Microsoft here on how to configure the admin consent workflow, but I’ll include the steps I took to enable it below:

1️⃣ Navigate to Microsoft Entra admin center. You need to be a global administrator to complete these steps.

2️⃣ Navigate to Enterprise applications > under Security section, select Consent and permissions.

ejkHqGuXljlM2jZxNR65NH0ZdjfLLVwAuTNX4Rq6e0p9R71xOiJRRJIlSxQH

3️⃣ Under Admin consent requests (Preview), set Users can request admin consent to apps they are unable to consent to to Yes.

meF3risxnynNsxEHCDgddwv1j6bjjIWOjgsKmxA8B5RPL6DcLjY2g23wdxI4

4️⃣ Now you need to set the users, groups or roles who are to review the admin consent requests (these need to also have the global administrator, cloud application administrator, and application administrator roles)

vorcJlWlnBMxTZWQBTpCKdyvPNGvtAnKyx4EZO21L1HOYAXHOcR78cZNCebh

5️⃣ Keep all other settings as default such as Enable email notifications to the reviewers when a request is made. Enable reminder email notifications to the reviewers when a request is about to expire.
And specify how long requests stay valid. then click Save.

BBZPCgY7wnNhzVpoDA1xN2Vr6V29EkxH7GQKpgGDbZ9glQW5FyaOgSsCCZc2
Note Note: It can take up to an hour for the workflow to become enabled – for me it took closer to 45 minutes.

6️⃣ After that time, when users access the app again and the message changed to requiring approval.

yHQz0I2vv3f6x3cOwWNmiK2ADndqmZLRPdc3YSE2Yc7mnUuV9oGG20PVffdw

7️⃣ This then notifies the user that their request has been sent, and an email is sent to the request admins. Then in Enterprise Applications, under Activity if you click on Admin consent requests (Preview) you will see the app listed, as well as being able to see who requested it on the Requested by tab.

eQBa37sbKgqMuCXRvdR88qSGw1t54u5AjQe4E4rK01Y0srBysp6V2o7cbIz3

8️⃣ From here, we just pressed Approve, which naturally approved the request. Once approved, the request is cleared from the admin consent requests list.

Note Note: You must login using a global admin account to approve the request.

Additionally, an email is sent to the request admis for approval. Admins can click on the Review request link to navigate to Admin consent requests section in Entra ID.

YLTBVn4WmceoKl7Pl0aiPRnmHAdFvEZfukqktKjT4pnogmYYo9UjLbPawWLM

The app now approved, users should be able to use the app to connect to their email accounts.

D1SgQncSuLyttsNoCiGiJfdRWausk50v3r0DR8k5ga0SSppB2zE4ayR0OL1t

Granting tenant-wide admin consent to an application

Microsoft documentation here talks about needing to grant admin consent for the applications to be available tenant-wide. It’s really easy to do as in my example, the BlueMail app is now listed under Enterprise Applications, so all we needed to do was:

1️⃣ Go to Enterprise applications > Select the application from the list > Select Permissions and then click Grant admin consent.

QA4OMAwLFm6lLXxiBlIQcor1r3MieFPZFh1kPDYPg1WHfm4ged1qedTaZHfd

2️⃣ Agree with the permissions the application requires and grant consent.

FfK6JhIPi6URUF0xPjhBgrhRmfdgYf0ejseQ46JFmAmcI2h3blOvXVr68qZb

Not a reader? Watch this related video tutorial:

5/5 - (1 vote)
Previous Post

Differences Between Delegated Permissions and Application Permissions Entra ID

Next Post

The Differences Between App Registration vs Enterprise App in Entra ID

Related Posts

Running Hyper-V and VMware Workstation on The Same Machine

August 15, 2024

How to Uninstall All Autodesk Products At Once Silently

July 29, 2024
Ftr5

How to Uninstall the Autodesk Genuine Service on Windows

July 29, 2024
Ftr19

How to Fix Windows Cannot Read the ProductKey From the Unattend Answer File in VirtualBox

July 26, 2024
Ftr25

How to Update Windows Terminal in Windows 10/11

July 26, 2024

How to Disable The Beep Sound in WSL Terminal on Windows

July 26, 2024

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Recent Posts

  • How To Turn On uBlock Origin Extension in Chrome (2025)
  • Images Hidden Due To Mature Content Settings In CivitAI
  • Azure OpenAI vs Azure AI Hub, How to Choose the Right One for Your Needs

Categories

Stay in Touch

Discord Server

Join the Discord server with the site members for all questions and discussions.

Telegram Community

Jump in Telegram server. Ask questions and discuss everything with the site members.

Youtube Channel

Watch more videos, learning and sharing with Leo ❤❤❤. Sharing to be better.

Newsletter

Join the movement and receive our weekly Tech related newsletter. It’s Free.

General

Microsoft Windows

Microsoft Office

VMware

VirtualBox

Technology

PowerShell

Microsoft 365

Microsoft Teams

Email Servers

Copyright 2025 © All rights Reserved. Design by Leo with ❤

No Result
View All Result
  • Home
  • Linux
  • Intune
  • macOS
  • VMware
  • VirtualBox
  • Powershell
  • Windows 10
  • Windows 11
  • Microsoft 365
  • Microsoft Azure
  • Microsoft Office
  • Active Directory

No Result
View All Result
  • Home
  • Linux
  • Intune
  • macOS
  • VMware
  • VirtualBox
  • Powershell
  • Windows 10
  • Windows 11
  • Microsoft 365
  • Microsoft Azure
  • Microsoft Office
  • Active Directory