App consent policies and the admin consent workflow

4slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

solvingmicrosoft365.com

1 / 4

App consent policies and the admin consent workflow

How to stop consent phishing without blocking legitimate apps: Entra ID app consent policies, the admin consent workflow, and a review process that scales.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-app-consent-policies

Slide 1Download PNG

solvingmicrosoft365.com

2 / 4

Should users be allowed to consent to apps in Entra ID?

Only to verified publishers for low-impact permissions, or not at all. Illicit consent grants — a phishing page that asks the user to approve an app with mailbox access — survive password resets and MFA. Disable user co…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-app-consent-policies

Slide 2Download PNG

solvingmicrosoft365.com

3 / 4

What is the admin consent workflow?

A setting that lets users request admin approval for an app they cannot consent to themselves. The request goes to designated reviewers with the permissions listed; approving grants tenant-wide consent. It replaces 'ask…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-app-consent-policies

Slide 3Download PNG

solvingmicrosoft365.com

4 / 4

How do I see which apps users have consented to?

Entra admin center → Enterprise applications → the app → Permissions shows admin and user consents; per user, Users → the user → Applications. The Graph oauth2PermissionGrants endpoint lists every grant tenant-wide for…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-app-consent-policies

Slide 4Download PNG

Auto-generated from App consent policies and the admin consent workflow. This page is not indexed and isn't part of the guide itself.