AADSTS65001: The user or administrator has not consented to use the application with ID " XYZXYZXYZ"

Question

We build an application using Microsoft graph api's. We register app using our personal account for authentication in azure portal. All things are working perfectly when user authenticate using his personal login credential. But when user use their organizational account for authentication eg "kaz@deltaforcegroup.co.uk" then it authenticate but it gives an error

how can we resolve this issue? which permissions we have to add for avoid this dialogue box?

Answer 1

To resolve this issue for Need admin approval Make sure to allow user consent for application

Sign into the Azure portal as a Global Administrator ->Enterprise applications -> Consent and permissions under security -> user consent setting -> allow as below and save

> [AADSTS65001: The user or administrator has not consented to use the application with ID

This issue frequently happens when you failed to grant admin permission to the scope, please check few workarounds:

In your Azure Portal -> Azure AD-> App Registrations -> Your App -> Expose an API ->Try to add application ID URI -> Add scope and client application as below

After adding expose an Api. Try to add API permission to access your app In your azure portal -> Api permission under manage -> add permission ->select MY APIS -> select your app -> add permission ->make sure to grant admin consent like below

Please check this Reference:resolving-need-admin-approval-error and similar SO thread by carl zhao