How to grant admin approval for FormsProFlowApp

%3CLINGO-SUB%20id%3D%22lingo-sub-668771%22%20slang%3D%22en-US%22%3EHow%20to%20grant%20admin%20approval%20for%20FormsProFlowApp%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-668771%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20trying%20to%20create%20a%20simple%20Flow%20that%20includes%20a%20Forms%20Pro%20survey.%20When%20we%20attempt%20to%20sign%20in%20to%20Forms%20Pro%20from%20Flow%20we%20receive%20an%20error%20message%3A%20%22Need%20admin%20approval%20FormsProFlowApp%20needs%20permission%20to%20access%20resources%20in%20your%20organization...%22%20Where%20do%20I%20tell%20our%20global%20admin%20to%20go%20to%20grant%20FormsProFlowApp%20permissions%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-668771%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Forms%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-819477%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20grant%20admin%20approval%20for%20FormsProFlowApp%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-819477%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F354651%22%20target%3D%22_blank%22%3E%40bradbe2355%3C%2FA%3EI%20am%20having%20to%20same%20issue%2C%20did%20you%20ever%20find%20how%20to%20grant%20permission%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-890442%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20grant%20admin%20approval%20for%20FormsProFlowApp%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-890442%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F110548%22%20target%3D%22_blank%22%3E%40Andrew%20Bannister%3C%2FA%3E%26nbsp%3BFormsPro%20Flow%20app%20does%20not%20need%20Admin%20approval%20by%20default%3B%20Tenant%20admin%20sometimes%20block%20users%20from%20giving%20consent.%20You%20can%20reach%20out%20to%20your%20admin%20to%20get%20you%20enabled.%3C%2FP%3E%0A%3CDIV%20id%3D%22tinyMceEditorclipboard_image_0%22%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1411185%22%20slang%3D%22en-US%22%3EHow%20to%20grant%20admin%20approval%20for%20FormsProFlowApp%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1411185%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EReason%20for%20this%20Message%20is%20it%20is%20asking%20permissions%20only%20an%20ADMIN%20can%20Grant%3C%2FP%3E%3CP%3EWhen%20this%20message%20shows%20on%20the%20same%20screen%20at%20the%20bottom%20there%20is%20are%20option%20to%20log%20in%20as%20admin%20then%20n%20there%2C%20to%20add%20the%20application%20and%20following%20are%20permissions%20it%20requires%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EPermissions%20requested%3CBR%20%2F%3EFormsProFlowApp%3CBR%20%2F%3EApp%20info%3CBR%20%2F%3EThis%20app%20would%20like%20to%3A%3CBR%20%2F%3E1.%20View%20user's%20forms%20-%20Allows%20the%20app%20user%20to%20view%20forms%20for%20the%20signed-in%20user.This%20is%20a%20permission%20requested%20to%20access%20your%20data%20in%20%3CTENANT%20name%3D%22%22%3E%3CBR%20%2F%3E2.%20Create%20and%20modify%20invites%20for%20user%20-%20Allows%20the%20app%20user%20to%20create%20and%20modify%20invites%20for%20user%20for%20the%20signed-in%20user.%20This%20is%20a%20permission%20requested%20to%20access%20your%20data%20in%20%3CTENANT%20name%3D%22%22%3E%3CBR%20%2F%3E3.%20View%20responses%20of%20user%E2%80%99s%20forms%20-%20Allows%20the%20app%20user%20to%20view%20forms%20responses%20for%20the%20signed-in%20user.%20This%20is%20a%20permission%20requested%20to%20access%20your%20data%20in%20%3CTENANT%20name%3D%22%22%3E%3CBR%20%2F%3E4.%20Submit%20responses%20for%20user%20-%20Allows%20the%20app%20user%20to%20submit%20form%20responses%20for%20the%20signed-in%20user.%20This%20is%20a%20permission%20requested%20to%20access%20your%20data%20in%20%3CTENANT%20name%3D%22%22%3E%3CBR%20%2F%3E5.%20View%20and%20modify%20user's%20forms%20-%20Allows%20the%20app%20user%20to%20view%20and%20modify%20forms%20for%20the%20signed-in%20user.%20This%20is%20a%20permission%20requested%20to%20access%20your%20data%20in%20%3CTENANT%20name%3D%22%22%3E%3CBR%20%2F%3E6.%20Sign%20you%20in%20and%20read%20your%20profile%20-%20Allows%20you%20to%20sign%20in%20to%20the%20app%20with%20your%20organizational%20account%20and%20let%20the%20app%20read%20your%20profile.%20It%20also%20allows%20the%20app%20to%20read%20basic%20company%20information.This%20is%20a%20permission%20requested%20to%20access%20your%20data%20in%20%3CTENANT%20name%3D%22%22%3E%3CBR%20%2F%3E7.%20Maintain%20access%20to%20data%20you%20have%20given%20it%20access%20to%20-%20Allows%20the%20app%20to%20see%20and%20update%20the%20data%20you%20gave%20it%20access%20to%2C%20even%20when%20you%20are%20not%20currently%20using%20the%20app.%20This%20does%20not%20give%20the%20app%20any%20additional%20permissions.This%20is%20a%20permission%20requested%20to%20access%20your%20data%20in%20%3CTENANT%20name%3D%22%22%3E%3CBR%20%2F%3E8.%20Sign%20you%20in%20and%20read%20your%20profile%20-%20Allows%20you%20to%20sign%20in%20to%20the%20app%20with%20your%20work%20account%20and%20let%20the%20app%20read%20your%20profile.%20It%20also%20allows%20the%20app%20to%20read%20basic%20company%20information.%3CBR%20%2F%3EThis%20is%20a%20permission%20requested%20to%20access%20your%20data%20in%20%3CTENANT%20name%3D%22%22%3E%3CBR%20%2F%3EAccepting%20these%20permissions%20means%20that%20you%20allow%20this%20app%20to%20use%20your%20data%20as%20specified%20in%20their%20terms%20of%20service%20and%20privacy%20statement.%3CBR%20%2F%3EThe%20publisher%20has%20not%20provided%20links%20to%20their%20terms%20for%20you%20to%20review.%3C%2FTENANT%3E%3C%2FTENANT%3E%3C%2FTENANT%3E%3C%2FTENANT%3E%3C%2FTENANT%3E%3C%2FTENANT%3E%3C%2FTENANT%3E%3C%2FTENANT%3E%3C%2FP%3E%3CP%3EYou%20can%20change%20these%20permissions%20at%20%3CA%20href%3D%22https%3A%2F%2Fmyapps.microsoft.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmyapps.microsoft.com%3C%2FA%3E.%20Show%20details%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1443334%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20grant%20admin%20approval%20for%20FormsProFlowApp%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1443334%22%20slang%3D%22en-US%22%3E%3CP%3ESo%20to%20review%20before%20granting%20permissions%20either%20ask%20the%20user%20to%20share%20the%20flow%20%2F%20app%20they%20using%20with%20the%20admin%2C%20admin%20runs%20the%20same%20app%20or%20flow%20and%20gets%20the%20prompt%20to%20accept%20the%20consent%2C%20Once%20the%20consent%20is%20accepted%20it%20will%20be%20registered%20in%20Azure%20AD%20as%20an%20Enterprise%20Application%2C%20Check%20on%20its%20permissions%20which%20API%20what%20permissions%20in%20the%20application%20details%20and%20if%20ok%20to%20be%20accepted%20then%20save%20it%20or%20if%20not%20then%20remove%20it%20after%20collecting%20the%20required%20details%20for%20further%20review%2C%20reason%20i%20say%20this%20as%20it%20is%20not%20documented%20anywhere%20what%20are%20these%20permissions%20Delegated%2FApplication%20which%20APIs%20etc...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBR%2C%3C%2FP%3E%3CP%3E%2FHS%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

We are trying to create a simple Flow that includes a Forms Pro survey. When we attempt to sign in to Forms Pro from Flow we receive an error message: "Need admin approval FormsProFlowApp needs permission to access resources in your organization..." Where do I tell our global admin to go to grant FormsProFlowApp permissions?

4 Replies

@bradbe2355I am having to same issue, did you ever find how to grant permission?

@Andrew Bannister FormsPro Flow app does not need Admin approval by default; Tenant admin sometimes block users from giving consent. You can reach out to your admin to get you enabled.

 

 

Reason for this Message is it is asking permissions only an ADMIN can Grant

When this message shows on the same screen at the bottom there is are option to log in as admin then n there, to add the application and following are permissions it requires


Permissions requested
FormsProFlowApp
App info
This app would like to:
1. View user's forms - Allows the app user to view forms for the signed-in user.This is a permission requested to access your data in <Tenant Name>
2. Create and modify invites for user - Allows the app user to create and modify invites for user for the signed-in user. This is a permission requested to access your data in <Tenant Name>
3. View responses of user’s forms - Allows the app user to view forms responses for the signed-in user. This is a permission requested to access your data in <Tenant Name>
4. Submit responses for user - Allows the app user to submit form responses for the signed-in user. This is a permission requested to access your data in <Tenant Name>
5. View and modify user's forms - Allows the app user to view and modify forms for the signed-in user. This is a permission requested to access your data in <Tenant Name>
6. Sign you in and read your profile - Allows you to sign in to the app with your organizational account and let the app read your profile. It also allows the app to read basic company information.This is a permission requested to access your data in <TENANT NAME>
7. Maintain access to data you have given it access to - Allows the app to see and update the data you gave it access to, even when you are not currently using the app. This does not give the app any additional permissions.This is a permission requested to access your data in <TENANT NAME>
8. Sign you in and read your profile - Allows you to sign in to the app with your work account and let the app read your profile. It also allows the app to read basic company information.
This is a permission requested to access your data in <TENANT NAME>
Accepting these permissions means that you allow this app to use your data as specified in their terms of service and privacy statement.
The publisher has not provided links to their terms for you to review.

You can change these permissions at https://myapps.microsoft.com. Show details

So to review before granting permissions either ask the user to share the flow / app they using with the admin, admin runs the same app or flow and gets the prompt to accept the consent, Once the consent is accepted it will be registered in Azure AD as an Enterprise Application, Check on its permissions which API what permissions in the application details and if ok to be accepted then save it or if not then remove it after collecting the required details for further review, reason i say this as it is not documented anywhere what are these permissions Delegated/Application which APIs etc...

 

BR,

/HS