Getting "Need admin approval" when logging in with user or guest account

(0) Share

Report

Posted on by romankorchak2

125

Hi All

I have created a new site in power pages and getting "Need admin approval" when trying to log in to it with Azure AD user or guest.

Details are "needs permission to access resources in your organisation that only an admin can grant. Please ask an admin to grant permission to this app before you can use it."
I am wandering if its something to do with licencing? As I know power pages sits on Data verse, using which requires premium licence, but I am not sure if that applies to power pages. So any links to power pages licencing articles would be appreciated

Thanks

Categories:

General topics

I have the same question (0)

All responses (5)

Answers (0)

oliver.rodrigues 9,368 Most Valuable Professional on at

Like (0)

Report

Hi, this is more related as to how your Azure AD is setup. A user with Global Administrator role should have received an e-mail to approve that access.

Was this reply helpful? Yes No
romankorchak2 125 on at

Like (0)

Report

Interesting, I registered 2 external users with my yahoo accounts and they can access the site with no issues, they can log in and view pages/lists where they have permissions (added to webrole),
But internal user needs to be approved by Global Admin first?

Was this reply helpful? Yes No
oliver.rodrigues 9,368 Most Valuable Professional on at

Like (0)

Report

It all depends on how you are authenticating, if your yahoo accounts are being authenticated via external identity provider or local this would probably not require admin consent. But your Azure AD is requesting that: Configure the admin consent workflow - Microsoft Entra | Microsoft Learn

Was this reply helpful? Yes No
godala_vamshi 174 on at

Like (0)

Report

@romankorchak2 I am facing same issue, were you able to figure out this ? Appreciate if you can share the info. Thank you

Was this reply helpful? Yes No
Fubar 8,350 Super User 2025 Season 2 on at

Like (0)

Report

@romankorchak2 as per Oliver it is Azure AD requesting it. There are a number of ways to give Consent. The consent workflow link provided by Oliver is what you would configure if each user needed to get admin approval.
If a Azure AD user with appropriate azure admin permissions (e.g. Office 365 Global Admin) attempts to login for the first time to the Portal/Power Pages web site they will have a checkbox that they can tick to grant Consent on behalf of the Organization - this is the easiest option (pressing the Accept button without the checkbox ticked, they will just consent to share their profile info so they can sign in and as they are Admin don't get message you are seeing)

Alternatively additional configuration in Azure AD can be performed to grant consent - see this link for some additional info https://learn.microsoft.com/en-us/security/zero-trust/develop/permissions-require-admin-consent

Was this reply helpful? Yes No