Forum Discussion
Security implications of admin consent required
Hello. I am new to using the software and don't want to enable anything within my organisation without fully understanding the implications. We have been given access to an external organisation da...
Permissions need to be granted even for accessing data within your own tenant, and if you add them via the Grant admin consent button in the portal, they are always granted tenant-wide. Instead, add the permissions therein but don't use the Consent button, and use method here: https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent#requesting-individual-user-consent
Do note that some permissions always require admin consent, in which case you will also be presented with a checkbox to consent on behalf of the organization (all users) - that's NOT mandatory. Details are in the article above.
Do note that some permissions always require admin consent, in which case you will also be presented with a checkbox to consent on behalf of the organization (all users) - that's NOT mandatory. Details are in the article above.