SharePoint Connector for Confluence Cloud - Need admin approval

SharePoint Connector for Confluence Cloud - Need admin approval

Depending on your organization's configuration for “Consent and permissions - User consent settings” under “Enterprise Applications”, there are cases where you need an Azure global admin to grant consent to the app on behalf of the whole organization.

Problem

You receive an error “SharePoint Connector for Confluence needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it.”

Admin approval

 

Cause

In general, this behavior is dependent on the User consent settings the Azure admin has done in the Enterprise applications section.

Detailed information can also be found in the official Microsoft documentation:
Configure how end-users consent to applications

There are 3 user consent options in the Consent and Permissions section.

Consent and permissions
  • Do not allow user consent

    • If this option is configured, then only administrators will be able to give consent to the app

  • Allow user consent for apps from verified publishers, for selected permissions

    • When this option is configured, users will be allowed to consent to the SharePoint Connector for Confluence Cloud only if the admin has deemed the “User.Read”, “offline_access”, and “Sites.Manage.All” permissions as low-impact.

  • Allow user consent for apps

    • If this option is configured, then the users will be able to give consent to all apps

Resolution

Try to embed a SharePoint List or SharePoint Document macro, and log in as an Azure admin. During the login process, an option to give consent to the whole organization will appear. You will be able to give consent on behalf of your organization (as you can see on the screenshot below)

Consent on behalf of your organization