# How to fix "Need admin approval" error

If the application permissions are not configured properly, you may receive a "Need admin approval" error screen upon Authorizing the Oauth2 credentials.

In this case, you should check if you have configured all the following permissions:

* IMAP.AccessAsUser.All
* offline\_access
* SMTP.Send
* User.Read

 and if the permissions have been added as delegated permissions:

<figure><img src="/files/ROoKF2EqbBCyoWER0PM0" alt=""><figcaption></figcaption></figure>

If you can see that the Admin consent required field is true for the permissions, an administrator has to grant access:

<figure><img src="/files/SlLWKz2kzUr5W0H9M8w6" alt=""><figcaption></figcaption></figure>

Please keep in mind that Email This Issue will use all of these permissions to get a token. Even if, for example, you wouldn't like to send emails, you still need to add the SMTP.Send permission.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.meta-inf.hu/email-this-issue/administration/mail-server-connections/microsoft-with-oauth2/troubleshooting-guides-for-microsoft-oauth2-connections/how-to-fix-need-admin-approval-error.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.