Azure application permisions not all enabled

Georgius 5

Hello,

I have application registration for Sharepoint on Azure portal.

My account has Global Admin rights, but

In API Permissions there is a button named "Grant admins consent for MSFT" which is disabled for me anyway;

So, is there any other right which should be added for my account ?

Thank you in advanced.

Navya 12,325 Reputation points Microsoft Vendor

2024-09-02T07:46:57+00:00

Hi @Georgius

Just checking in to see if below information was helpful. If you have any further updates on this issue, please feel free to post back.
Navya 12,325 Reputation points Microsoft Vendor

2024-09-19T13:17:43.77+00:00

Hi @Georgius

Just checking in to see if below information was helpful. If you have any further updates on this issue, please feel free to post back.

1 answer

Navya 12,325 Reputation points Microsoft Vendor

2024-08-30T09:45:30.37+00:00

Hi @Georgius

Thank you for posting this in Microsoft Q&A.

I understand you are trying to grant admin consent for MSFT with global administrator permissions, but the "Grant admin consent for MSFT" option appears to be disabled.

I'm sharing a screenshot to confirm that we are on the same page.

To grant admin consent you require Privileged Role Administrator, Cloud Application Administrator or Application Administrator, for granting consent for apps requesting any permission for any API, except Microsoft Graph app roles (application permissions).

Global administrator role is privilege's role in Entra admin center. You can grant admin consent for your tenant in Entra using the global administrator role. Please check your role is correct, then try to access in a different browser or an incognito session. If you are still facing an issue, please send the screenshot.

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.
Please sign in to rate this answer.
Georgius 5 Reputation points

2024-09-02T08:47:25.4633333+00:00

Hello Navya,

Thanks for answer,

Yes, we are talking about exactly that button which you have on screen,

Where to find my account status if I am global admin, there are different and looks obsolete advices in google about it.

Thank you.

Navya 12,325 Reputation points Microsoft Vendor

2024-09-16T07:36:46.4933333+00:00

Hi @Georgius

You can find on user management blade. Select your account under users list - Select assigned roles.

You can get via PowerShell

Connect-Entra -Scopes 'RoleManagement.Read.Directory' Get-EntraDirectoryRole -ObjectId '019ea7a2-1613-47c9-81cb-20ba35b1ae48'

Hope this helps. Do let us know if you any further queries.

Georgius 5 Reputation points

2024-09-19T13:35:27.09+00:00

Hello Navya,

Thanks for answer.

I found that place and role is "Application administrator"

With regards.

Navya 12,325 Reputation points Microsoft Vendor

2024-09-20T01:00:13.57+00:00

Hi @Georgius

An Application Administrator has the authority to grant consent for applications seeking any permission for any API, with the exception of Microsoft Graph app roles, which are application permissions. Please verify the type of API permissions for which you are attempting to grant admin consent.

Georgius 5 Reputation points

2024-09-20T04:49:40.1166667+00:00

Hi Navya,

API what I need is lot of in Microsoft Graph, but now I need for SharePointTenantSettings.ReadWrite, Site.Manage.All and so on.

Navya 12,325 Reputation points Microsoft Vendor

2024-09-20T09:52:08.1666667+00:00

Hi @Georgius

You require Global administrator permissions to grant admin consent for API permissions.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure application permisions not all enabled

1 answer

Your answer