microsoft-graph-explorer-v4 icon indicating copy to clipboard operation
microsoft-graph-explorer-v4 copied to clipboard

Asked for admin approval when permission says it's not required

Open heaths opened this issue 1 year ago • 2 comments

Describe the bug The list of permissions says that admin approval is not required, yet I'm being asked for admin approval/

To Reproduce Steps to reproduce the behavior:

  1. Sign into Microsoft Graph Explorer.
  2. GET https://graph.microsoft.com/v1.0/chats
  3. Click Modify Permissions in request
  4. See list. Notice none say admin approval required. Click Consent.

Expected behavior I can grant permissions to Graph Explorer as needed, at least for those permissions that say admin approval isn't necessary.

Screenshots image

Desktop (please complete the following information):

  • OS: Windows 11
  • Browser: Edge Dev
  • Version: 117.0.2045.7 (Official build) dev (64-bit)

heaths avatar Aug 24 '23 17:08 heaths

Hey @heaths. A permission may not require admin consent, but there could be tenant restrictions that still prevent you from consenting to these permissions. I recommend seeking admin approval for this case. If you are trying to test an endpoint, I recommend using a sandbox tenant which you have control over: https://developer.microsoft.com/en-US/microsoft-365/dev-program

Let me know if this helps

Onokaev avatar Aug 28 '23 06:08 Onokaev

My bug report was less about needing admin permission, and more about the confusing messaging. One view says no "admin consent required" (emphasis mine) while another says "need admin approval". Which is it? Assuming I'm a customer that doesn't know whether the permission required admin approval or some tenant admin required it, perhaps wording could be fixed. If the dialog is because of tenant restrictions, perhaps "Need tenant admin approval"? How am I supposed to know who to contact? You just keep using the word "admin" everywhere and it's a bit confusing.

heaths avatar Aug 28 '23 16:08 heaths