Admin consent for single application

[Marek Stelcik]

Hello,

can you please help me solve following.

In Single tenant, we disabled user possibility to sign up to applications (Integrated apps -> Let people in your organization decide whether third-party apps can access their Office 365 information turned off). However we would like to provide consent to a specific users/groups (non admins) to https://fasttrack.microsoft.com/.

I, as an admin, went to the page registered works for me well. Subsequently, I went to "enterprise applications" and found newly created app "FastTrack" and granted access to my test user. However when I sign in under test account I still receive "You cannot access this application. System administrator needs to give consent".

Can you navigate me please how to do this (Ideally not for all users in tenant but for specific users).

Thank you

[#2]

Providing consent is different from adding permissions, it can only be done via the login page as part of the OAuth flow, afaik. So you as admin need to grant consent first, and then add permissions. Details for example here: https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-integrating-applica...

[#3]

Hello Vasil,

thank you for reply. I maybe incorrectly expressed myself. I did both as you indicate. First logged in to fasttrack as admin and gave consent. Afterwards i added permissions and went to Azure Application registration and gave permissions to sign in. However, this did not enable non-admin users to log in.

Thank you for help.

Marek