AADSTS90093 - An administrator has set a policy

[Jonathan Wragg]

We're in the process of trialling email apps from the Google Play Store and seeing what could be used as an alternative to the native email client or the Microsoft Outlook app.

When trying to login to an email app to access the Office 365 account, it displays an error:

"Sorry, but we're having trouble with signing you in."

followed by

"AADSTS90093: An administrator of <Tenant> has set a policy that prevents you from granting <App> the permissions it is requesting. Contact an administrator of <Tenant> who can grant permissions to this application on your behalf."

Using the Enterprise Application section in Azure AD, i've assigned the app to the user account but still the error persists.  I'm not exactly sure what i'm doing wrong as from what i can see, the user account has permission to use the app.

Any help appreciated.

[#2]

An administrator needs to grant consent to the app, step 6 here: https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-integrating-applica...

[#3]

Thanks Vasil, I did come across that same doc originally but I don't have the option it's saying in the step 6. There is no 'required permissions' section nor anywhere else with 'grant permissions'.

In Azure AD, Enterprise Applications, then the properties of the app has no option as listed in the doc.