Issue
When signing into the FYI add-in (Outlook and Office), the below message displays:
Cause
The application has not been granted permission by a Microsoft 365 Administrator in Azure Active Directory, which prevents the user from proceeding. As admin consent settings are not enabled in Azure Active Directory, the user cannot send a consent request to an administrator for them to approve.
Note: Should the message display "Approval required" refer to When adding a user, and they see a message that it needs to be approved, how do I approve this?
Solution
If the application is being tested by a single user prior to deployment, a Microsoft 365 admin account should be used to grant the application permission when the window pops up.
If the application is to be granted consent across the tenant and for all users, a Microsoft 365 admin should perform the following after referring to the Microsoft article Grant tenant-wide admin consent in Enterprise apps.
- Open Azure Active Directory > Enterprise Applications
- Search for the application
- Select the Permissions option under Security
- Select Grant admin consent
If you receive the same consent window using the admin account in Azure, the account likely does not have the required permissions. You will need to request your IT administrator update the account to have global admin rights, or grand admin consent using the IT's global admin account.
