Configure AAD Authentication - Grant Admin Consent

Administrators can provide their consent for the specific permissions requested for the application data and capabilities.

The following users with Azure AD account can provide can grant admin consent.
  • Global Administrator or Privileged Role Administrator - to grant consent for applications requesting any permission for any API.
  • Cloud Application Administrator or Application Administrator - to granting consent for applications requesting any permission for any API except Azure AD Graph or Microsoft Graph app roles (application permissions).
  • A user with custom directory role - to grant required permissions to applications.
To grant admin consent:
  1. Sign in to the Azure portal as a user with one of the roles listed in the pre-requisite section.
  2. Select Azure Active Directory > Application Registrations.
  3. Select the application to which you want to grant admin consent.
  4. Select API permissions.
  5. Review the permissions the application requires and then click Grant admin consent.