How to Fix the "Approval Required" Issue

Issue Description

When a customer registered an account in the MSPbots app, he encountered an error message saying Approval Required.

Issue Cause

This situation is because your Azure AD administrator has added some additional security policies that are blocking all AAD applications similar to MSPbots (even though it may not be convenient, it is best practice).

Applications and Required Permissions

Users who register for MSPbots accounts may encounter this issue, but to resolve it, you may need to contact someone with ATS AAD administrator permissions in your team.

How to Fix "Approval Required" Issue

1. Sign in to Microsoft Azure.
2. In Azure services, click Microsoft Entra ID.
   
   
   
   
3. In Manage, click Enterprise applications.
   
   
   
   
4. In Security, click Consent and permissions.
   
   
   
   
5. There are two solutions below, you can choose either one:
   
   1. (Optional) Admin consent settings.
      
      1. In Manage, click Admin consent settings.
      2. Check the setting for the option Users can request admin consent to apps they are unable to consent to.
         
         • If this option is set to Yes, you need to request admin consent to add MSPbots to your AAD applications.
         • If this option is set to No, then you need to contact someone with the ATS AAD admin permissions to approve adding MSPbots to your AAD applications.
           
           
           
           
   2. (Optional) User Consent settings.
      1. Click User consent settings.
      2. Check the setting for the option User consent for applications.
         
         • If the option is set to Do not allow user consent, please contact someone with ATS AAD administrator permissions to consent to add MSPbots to your AAD application.
         • If the option is set to Allow user consent for apps from verified publishers, for selected permissions (Recommended), you would be able to consent to adding MSPbot to the AAD application yourselves, without need for administrator intervention. This setting is recommended by Microsoft Azure official.
         • If the option is set to Allow user consent for apps, all users can consent for any app to access the organization's data.
           
           

If you want to know the official response from Microsoft Azure, please refer to https://learn.microsoft.com/en-us/answers/questions/1356729/need-admin-approval-how-do-i-by-pass-this-for-azur.