Need admin approval while authorizing onedrive using oauth2.0

Question

Hi Support Team,

The error "Needs admin approval" appeared when we attempted to authorize our OneDrive account using Oauth 2.0.

The below urls are used for authorization

AuthURL: https://login.microsoftonline.com/common/oauth2/v2.0/authorize

Access Token URL: https://login.microsoftonline.com/common/oauth2/v2.0/token

Scope: offline_access files.readwrite.all

Clientid and clientsecret are created in microsoft azure portal of free trail account

For your reference i have attached the screenshot of issue Onedrive Authorization issue.png

Thanks and Regards,

Mageshwari

Answer 1

Hello,

Welcome to Microsoft Q&A,

If the application is not pre-approved by the organization or if it’s running in a personal (non-enterprise) tenant, admin consent is mandatory if the scope has high-previlage access.

1. files.readwrite.all Scope: This permission grants access to all files in the user's OneDrive, which is a high-privilege scope requiring admin approval.

Grant Admin Consent (If you have admin access)

1. Log into Azure Portal: Azure Portal.
2. Navigate to Microsoft Entra ID --> Enterprise Applications --> Your Application.
3. Click Permissions under Security in the left-hand menu.
4. Click Grant admin consent for <tenant name>.
5. Confirm the action.

If you don't have admin access, construct and send the below URL for the admin to provide consent to the application.

https://login.microsoftonline.com/<tenant-id>/adminconsent?client_id=<client-id>

Please Upvote and accept the answer if it helps!