Troubleshooting consenting to SharePoint/Azure apps
Who is this article for?Administrators and IT Administrators troubleshooting app issues.
SharePoint or Azure access permissions are required.
Depending on which modules are approved, there are additional aspects that require consent on the AppConsent page before they can be used.
This article goes through troubleshooting of the most common access issues relating to consenting to apps.
1. When do you need to do use the app consent page?
When starting Outlook that includes the Mail Manger app, if you are getting messages like "Need admin approval" _________.mailmanager.com needs permission to access resources in your organization that only admin can grant. Please ask an admin to grant permission to this app before you can use it.
This would need to be done by a user with the appropriate admin permissions on the Azure/SharePoint sites. The page is here: AppConsent page. The appropriate options are needed depending on what you are using.
2. Issue using the consent page
When trying to access your SharePoint page, you get an error: "Error accessing https://https://abc.sharepoint.com.sharepoint.com"
This error suggests you have entered the address of the SharePoint tenant instead of just the tenant name.
3. Solution
To resolve this issue, check the Azure consent.
For the links that open in Azure to consent to enterprise applications, the person approving needs to have the valid Administrator permissions for this.
These include:
- Global Administrator
- Cloud Application Administrator
- Application Administrator
- Owner of the service principal
To check the user assignment:
- Go to Microsoft Entra ID.
- Select Users.
- Find the user in the list.
- Select the user.
- Navigate to the Assigned roles section.
- Switch to the Active assignments tab.
Alternatively, you can check the role.
To check the role assignment:
- Go to Microsoft Entra ID.
- Select Roles and administrators.
- Find the role in the list.
- Check who is assigned to the role.