Need admin approval unverified This app may be risky. If you trust this app, please ask your admin to grant you access

Question

I have made a web app that using Microsoft Graph API's. when we authenticate user using their personnel account then it work perfectly but when someone use their organizational account then error display which is

"AADSTS65001: The user or administrator has not consented to use the application with ID '29eb2e50-3e2b-45a4-9488-d9b08a34b6f0' named 'testing app'.
Send an interactive authorization request for this user and resource.
Trace ID: 4a665bcf-c19e-48f8-b5c2-056e61aa2d00
Correlation ID: 1ad728bb-6fa2-4f27-ae5e-215f580d2e9e
Timestamp: 2022-09-05 10:46:49Z","error_codes":[65001],"timestamp":"2022-09-05 10:46:49Z","trace_id":"4a665bcf-c19e-48f8-b5c2-056e61aa2d00","correlation_id":"1ad728bb-6fa2-4f27-ae5e-215f580d2e9e","suberror":"consent_required"}

Now kindly let me know how can we resolve it. I have done all changes in our Azure app which is provided by the internet but still the same error. Please let me know which permission I should add or which changes are made to resolve this issue?

Answer 1

First, you need to be the administrator of the tenant (if you are not a tenant administrator, you cannot give the administrator permission), you can set up user roles according to Assign Azure AD roles.

1.Log in to https://portal.azure.com as a tenant administrator.

2.Open the registration of your application in the following location.

3.Go to settings and then the required permissions.

4.Press the grant permission button.

Check if the user or organizational account has the required permission granted as seen in the sample below.

Answer 2

The issue I'm facing right now is very similar to the question asked here. Here is the error I got during the sign-in process.

The problem is clearly mentioned on the app registration page.

Starting November 9th, 2020 end users will no longer be able to grant consent to newly registered multitenant apps without verified publishers.

It looks like we need to publish our app before signing in from multi-tenant accounts.

Resources:-

• How to grant access to user to give consent to 3rd party unverified applications for development purpose?
• Configure how users consent to applications
• Publisher verification