How to fix "Need admin approval" error

If the application permissions are not configured properly, you may receive a "Need admin approval" error screen upon Authorizing the Oauth2 credentials.

In this case, you should check if you have configured all the following permissions:

  • IMAP.AccessAsUser.All

  • offline_access

  • SMTP.Send

  • User.Read

and if the permissions have been added as delegated permissions:

If you can see that the Admin consent required field is true for the permissions, an administrator has to grant access:

Please keep in mind that Email This Issue will use all of these permissions to get a token. Even if, for example, you wouldn't like to send emails, you still need to add the SMTP.Send permission.

Last updated