SharePoint Connector for Confluence Cloud - Need admin approval

Depending on the configurations of your organization for “Consent and permissions - User consent settings” under “Enterprise Applications” there are cases where you need an Azure global admin to give consent to the app on behalf of the whole organization.

Problem

You receive an error “SharePoint Connector for Confluence needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it.”

Admin approval

 

Cause

In general, this behavior is dependent on the User consent settings the Azure admin has done in the Enterprise applications section.

Detailed information can also be found in the official Microsoft documentation:
Configure how end-users consent to applications

There are 3 user consent options in the Consent and permissions section.

Consent and permissions
  • Do not allow user consent

    • If this option is configured then only administrators will be able to give consent to the app

  • Allow user consent for apps from verified publishers, for selected permissions

    • When this option is configured then users will be allowed to consent the SharePoint Connector for Confluence Cloud only if the admin has considered the “User.Read”, “offline_access” and “Sites.Manage.All” permissions as low impact.

  • Allow user consent for apps

    • If this option is configured then the users will be able to give consent to all apps

Resolution

Try to embed a SharePoint List or SharePoint Document macro and login as an Azure admin and an option to give consent to the whole organization will appear during the login proccess. You will be able to give consent on behalf of your organization (as you can see on the screenshot below)