Introduction

This post is meant for users who are trying to utilize the Microsoft Graph Explorer but are getting an error regarding admin consent. This error is described in the picture below :

image

 

Giving Consent for All Users for Microsoft Graph Explorer

This error is occurring because the user trying to use the graph explorer is trying to utilize a v2 permission that requires admin consent. The permissions/scopes regarding the v2 endpoint are described in the link here : https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-v2-scopes

 

Resolution

To resolve this issue, the Microsoft Graph explorer provides a convenient pre-developed URL for users to give the Global Admin of the tenant in order to grant admin consent on behalf of all users in the tenant. This is currently the only way to let users use the Microsoft Graph Explorer to get access to the Microsoft Graph API with permissions that require Admin Consent.

 

This link can be found by following the steps described in the pictures below.

 

image

 

image

 

image

 

 

11
Leave a Reply

avatar
5 Comment threads
6 Thread replies
0 Followers
 
Most reacted comment
Hottest comment thread
3 Comment authors
Frank Hu MSFTMahnooshJon Recent comment authors
  Subscribe  
newest oldest most voted
Notify of
Jon
Guest
Jon

I cannot get past the Sign in With Microsoft link without seeing the: “Need admin approval” error message with error code: AADSTS90094.
Is there a way to get to the link through the portal?
Or can you just share the link here?

Mahnoosh
Guest
Mahnoosh

Hi Frank,

Thank you for your article.
Do you know how can I revoke the permission(admin permissions) after granted ?

Mahnoosh
Guest
Mahnoosh

Hi Frank,

Thank you for your article.
Do you know how can I revoke the permission(admin permissions) after granted ?