Introduction

This post is meant for users who are trying to utilize the Microsoft Graph Explorer but are getting an error regarding admin consent. This error is described in the picture below :

image

 

Giving Consent for All Users for Microsoft Graph Explorer

This error is occurring because the user trying to use the graph explorer is trying to utilize a v2 permission that requires admin consent. The permissions/scopes regarding the v2 endpoint are described in the link here : https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-v2-scopes

 

Resolution

To resolve this issue, the Microsoft Graph explorer provides a convenient pre-developed URL for users to give the Global Admin of the tenant in order to grant admin consent on behalf of all users in the tenant. This is currently the only way to let users use the Microsoft Graph Explorer to get access to the Microsoft Graph API with permissions that require Admin Consent.

 

This link can be found by following the steps described in the pictures below.

 

image

 

image

 

image

 

 

0 0 vote
Article Rating
Subscribe
Notify of
guest
11 Comments
Oldest
Newest Most Voted
Inline Feedbacks
View all comments
Jon
Jon
2 years ago

I cannot get past the Sign in With Microsoft link without seeing the: “Need admin approval” error message with error code: AADSTS90094.
Is there a way to get to the link through the portal?
Or can you just share the link here?

Mahnoosh
Mahnoosh
1 year ago

Hi Frank,

Thank you for your article.
Do you know how can I revoke the permission(admin permissions) after granted ?

Mahnoosh
Mahnoosh
1 year ago

Hi Frank,

Thank you for your article.
Do you know how can I revoke the permission(admin permissions) after granted ?

Mahnoosh
Mahnoosh
1 year ago
Reply to  Frank Hu MSFT

Thank you Frank,

after I removed graph explorer from enterprise application , can I still use user consent permission from Microsoft graph ?

Mahnoosh
Mahnoosh
1 year ago
Reply to  Frank Hu MSFT

Thank you Frank,

after I removed graph explorer from enterprise application , can I still use user consent permission from Microsoft graph ?