So recently, Resource Specific Consent was allowed to be granted for Teams applications to access resources on behalf of a team. The default setting within the Azure portal was to allow Team owners to grant these permissions. This means that by default no Azure Admin Consent was required for resources that were accessed by that team only (where teams could be public but permissions had to be granted for each team separately).
Analogously, we were wondering if User Specific Consent could be granted only to resources that were accessed by the user. This would mean that Team resources would not have to be unnecessarily granted access to and would further modularize permissions. This would also enable a lot of work that could be done on behalf of the user. Most of the delegated permissions that we see in the Microsoft Graph API for Teams resources by default require Admin Consent for apps that use User-delegated permissions.
In order to boost user productivity, we believe users should be able to manage their work in interesting ways without having to hunt down their IT admin.
Is this User Specific Consent / User delegation -- without Azure Admin Consent -- already in place? Is there a viable alternative, if not? Are there plans on the roadmap to enable this down the line?
A very useful resource for us are the messages shared within channels, groups, DMs where a user is already present. So workarounds specific to messages would interest us. However, the general situation for any user-accessed resource is what we'd like to understand.
