Microsoft Tech Community Live:  Microsoft Teams Edition
November 09, 2021, 08:00 AM - 12:00 PM (PST)
SOLVED

TeamsFlowTab - Need admin approval

%3CLINGO-SUB%20id%3D%22lingo-sub-555607%22%20slang%3D%22en-US%22%3ETeamsFlowTab%20-%20Need%20admin%20approval%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-555607%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20trying%20to%20add%20MS%20flow%20tab%20in%20Teams%20and%20added%20successfully%2C%20and%20When%20I%20try%20to%20sign-in%2C%20I%20am%20getting%20below%20error.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3ETeamsFlowTab%20needs%20permission%20to%20access%20resources%20in%20your%20organization%20that%20only%20an%20admin%20can%20grant.%20Please%20ask%20an%20admin%20to%20grant%20permission%20to%20this%20app%20before%20you%20can%20use%20it.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CSPAN%20class%3D%22bold%22%3EMessage%3A%26nbsp%3B%3C%2FSPAN%3EAADSTS90094%3A%20An%20administrator%20of%26nbsp%3B%20has%20set%20a%20policy%20that%20prevents%20you%20from%20granting%20TeamsFlowTab%20the%20permissions%20it%20is%20requesting.%20Contact%20an%20administrator%20of%20who%20can%20grant%20permissions%20to%20this%20application%20on%20your%20behalf.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EAnd%20I%20know%2C%20we%20should%20grant%20admin%20consent%20in%20Azure%20AD%2C%20but%20I%20couldn't%20find%20this%20appplication(TeamsFlowTab)%20in%20Enterprise%20applications%20list.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3ECould%20you%20please%20someone%20let%20me%20know%2C%20how%20we%20can%20allow%20this%20app%20in%20Azure%20to%20use%20in%20MS%20Teams.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EThanks.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-555607%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-555619%22%20slang%3D%22en-US%22%3ERe%3A%20TeamsFlowTab%20-%20Need%20admin%20approval%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-555619%22%20slang%3D%22en-US%22%3E%3CBR%20%2F%3ETry%20this%3A%3CBR%20%2F%3ETurn%20on%20the%20option%20%22approve%20as%20an%20administrator%20of%20the%20organization%22%20when%20adding%20the%20first%20Flow%20Tab.%3CBR%20%2F%3E%3CBR%20%2F%3E%E2%80%9CYou'll%20need%20a%20O365%20Global%20Admin%20or%20an%20AAD%20Global%20Admin%20to%20authorize%20the%20use%20once%20for%20the%20entire%20organization%E2%80%9D%3CBR%20%2F%3E%3CBR%20%2F%3EAdam%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-555686%22%20slang%3D%22en-US%22%3ERe%3A%20TeamsFlowTab%20-%20Need%20admin%20approval%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-555686%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F72542%22%20target%3D%22_blank%22%3E%40adam%20deltinger%3C%2FA%3E%26nbsp%3BHello%20Adam%2C%20thank%20you%20very%20much%20for%20the%20quick%20response%2C%20I%20will%20try%20your%20solution%20and%20let%20you%20know.%20Thank%20you.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-561779%22%20slang%3D%22en-US%22%3ERe%3A%20TeamsFlowTab%20-%20Need%20admin%20approval%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-561779%22%20slang%3D%22en-US%22%3EHello%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F20869%22%20target%3D%22_blank%22%3E%40Adam%3C%2FA%3E%2C%20I%20tried%20your%20solution%20and%20I%20enbled%20the%20teasflowtab%20for%20all%20users.%20Thanks%20a%20lot%20and%20you%20saved%20my%20time%20a%20lot.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2206006%22%20slang%3D%22en-US%22%3ERe%3A%20TeamsFlowTab%20-%20Need%20admin%20approval%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2206006%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F105816%22%20target%3D%22_blank%22%3E%40Ramesh%20Duggineni%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20was%20answered%20a%20while%20back%2C%20but%20we%20still%20run%20into%20this%20issue%20long%20enough%20that%20we%20decided%20to%20write%20an%20article%20about%20how%20to%20solve%20the%20%22%3CA%20href%3D%22https%3A%2F%2Fappfluence.com%2Fhelp%2Farticle%2Fmicrosoft-teams-need-admin-approval%2F%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Eneeds%20admin%20approval%3C%2FA%3E%22%20problem%20in%20our%20app.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20main%20confusion%20is%20that%20some%20organizations%20block%20access%20to%20apps%20via%20the%20Teams%20admin%20center%2C%20and%20others%20via%20the%20AAD%20console%2C%20so%20both%20options%20need%20to%20be%20checked.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

I am trying to add MS flow tab in Teams and added successfully, and When I try to sign-in, I am getting below error.

 

TeamsFlowTab needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it.

 

Message: AADSTS90094: An administrator of  has set a policy that prevents you from granting TeamsFlowTab the permissions it is requesting. Contact an administrator of who can grant permissions to this application on your behalf.

 

And I know, we should grant admin consent in Azure AD, but I couldn't find this appplication(TeamsFlowTab) in Enterprise applications list.

 

Could you please someone let me know, how we can allow this app in Azure to use in MS Teams.

 

Thanks.

4 Replies
best response confirmed by Ramesh Duggineni (Occasional Contributor)
Solution

Try this:
Turn on the option "approve as an administrator of the organization" when adding the first Flow Tab.

“You'll need a O365 Global Admin or an AAD Global Admin to authorize the use once for the entire organization”

Adam

@adam deltinger Hello Adam, thank you very much for the quick response, I will try your solution and let you know. Thank you.

 

Hello @Adam, I tried your solution and I enbled the teasflowtab for all users. Thanks a lot and you saved my time a lot.

@Ramesh Duggineni 

This was answered a while back, but we still run into this issue long enough that we decided to write an article about how to solve the "needs admin approval" problem in our app.

 

The main confusion is that some organizations block access to apps via the Teams admin center, and others via the AAD console, so both options need to be checked.