{"id":20104,"date":"2023-08-18T13:39:46","date_gmt":"2023-08-18T13:39:46","guid":{"rendered":"https:\/\/help.kanidesk.com\/en\/docs\/integrations\/learning-about-desk365s-powerful-integrations\/configure-user-consent-for-applications-in-azure-ad\/"},"modified":"2026-03-03T08:45:41","modified_gmt":"2026-03-03T08:45:41","slug":"configure-user-consent-for-applications-in-azure-ad","status":"publish","type":"docs","link":"https:\/\/help.desk365.io\/en\/articles\/configure-user-consent-for-applications-in-azure-ad\/","title":{"rendered":"Configure user consent for applications in Microsoft Entra ID admin center"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Microsoft Azure Active Directory (Azure AD) is a cloud-based identity and access management solution that helps organizations to manage user identities and access to resources. One of the key features of Azure AD is the ability to manage user consent to applications. This feature enables organizations to control how users grant permission to third-party applications that access their data.<\/p>

With Azure AD, administrators can configure user consent settings to ensure that users only grant permission to applications that are trusted and meet the organization’s security requirements. By default, all users have the ability to give consent to applications for permissions that do not necessitate administrator consent. However, administrators can change this setting to require users to obtain approval from an administrator before granting permission to an application.<\/p>

Configuring user consent settings in Azure AD is a critical step in securing an organization’s data. It ensures that only trusted applications have access to sensitive data and helps prevent data breaches. In this article, we will explore how to configure user consent to applications in Azure AD and the different consent settings available to administrators.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

Understanding User Consent in Azure AD<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

When it comes to managing applications in Azure AD, user consent is an essential aspect that administrators need to understand. This section will cover what user consent is, why it is important, and the different types of user consent available in Azure AD.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

What is User Consent?<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

User consent refers to the process of granting an application permission to access a user’s data. Before an application can access data in an organization, a user must grant the application permissions to do so. In Azure AD, users have the ability to grant consent to applications originating from verified publishers or their own organization, while strictly adhering to the permissions specifically chosen by the administrator.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

Why is User Consent Important?<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

User consent is important because it helps protect an organization’s data and ensures that applications only have access to the data they need. By granting permissions only for low-impact actions, administrators can reduce the risk of data breaches and unauthorized access to sensitive information.<\/p>

There are two types of user consent available in Azure AD: admin consent and user consent. Admin consent is granted by an administrator and applies to all users in the organization. User consent, on the other hand, is granted by individual users and only applies to their own account.<\/p>

Under user consent, there are two categories of permissions: low-impact and high-impact. Low-impact permissions are those that do not have access to sensitive information or actions, while high-impact permissions have access to sensitive information or actions that can affect the organization as a whole.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"classify\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t

Configuring User Consent in Azure AD Admin Portal<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Configuring user consent is an important aspect of managing applications in Azure AD. This section provides an overview of how to access and configure user consent settings in Azure AD.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

Accessing User Consent Settings<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

To access user consent settings in Azure AD, follow these steps:<\/p>

1. Sign in to the Azure portal<\/a> as a Global Administrator.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t

2. Select Azure Active Directory.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"choose\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

3. Select Enterprise applications from the left side of the menu.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"enterprise\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

4. Select Consent and permissions.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"consent\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

5. Select User consent settings. Select which consent setting you want to configure for all users.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"user\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

6. Select Save to save your settings.<\/p>

By following these steps, organizations can configure user consent settings to ensure that users are only granting access to applications and data that they trust and that meet the organization’s security requirements.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t

Configuring User Consent in Microsoft Entrata Admin Center<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Click on Enterprise Applications and then click on ‘Consent and Permissions’ as shown in the screenshot below:<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"enterprise\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Choose one of the options as appropriate for your organization as shown below.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"user\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

3. If you choose the second option, you’ll need to make sure the Permission Classifications allow the ‘User.Read’ permission which is the only permission Desk365 needs as shown below:<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"user\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

Configuring user consent settings in Azure Active Directory is a crucial step in ensuring that your organization’s data remains secure. By default, all users have the ability to grant consent to applications for permissions that do not necessitate administrator consent. However, as an administrator, you have the ability to configure the user consent settings to meet your organization’s specific needs.<\/p>

Through the Azure portal, you can select which consent settings you want to configure for all users. You can choose to require user consent for all applications, require user consent for specific applications, or disable user consent altogether. Additionally, you can specify whether users can consent to applications that require admin consent or not.<\/p>

It’s important to note that configuring user consent settings is just one part of a comprehensive security strategy.<\/p>

Organizations should also implement other security measures such as multi-factor authentication, conditional access policies, and regular security assessments to ensure the highest level of protection for their data.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"author":1,"featured_media":0,"parent":18745,"menu_order":4,"comment_status":"open","ping_status":"closed","template":"","doc_tag":[],"class_list":["post-20104","docs","type-docs","status-publish","hentry","no-post-thumbnail"],"comment_count":0,"_links":{"self":[{"href":"https:\/\/help.desk365.io\/en\/wp-json\/wp\/v2\/docs\/20104","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/help.desk365.io\/en\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/help.desk365.io\/en\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/help.desk365.io\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/help.desk365.io\/en\/wp-json\/wp\/v2\/comments?post=20104"}],"version-history":[{"count":9,"href":"https:\/\/help.desk365.io\/en\/wp-json\/wp\/v2\/docs\/20104\/revisions"}],"predecessor-version":[{"id":35474,"href":"https:\/\/help.desk365.io\/en\/wp-json\/wp\/v2\/docs\/20104\/revisions\/35474"}],"up":[{"embeddable":true,"href":"https:\/\/help.desk365.io\/en\/wp-json\/wp\/v2\/docs\/18745"}],"next":[{"title":"Integrate Jira with Desk365","link":"https:\/\/help.desk365.io\/en\/articles\/integrate-jira-with-desk365\/","href":"https:\/\/help.desk365.io\/en\/wp-json\/wp\/v2\/docs\/24089"}],"prev":[{"title":"Create recurring tasks using Power Automate","link":"https:\/\/help.desk365.io\/en\/articles\/create-recurring-tasks-using-power-automate\/","href":"https:\/\/help.desk365.io\/en\/wp-json\/wp\/v2\/docs\/21776"}],"wp:attachment":[{"href":"https:\/\/help.desk365.io\/en\/wp-json\/wp\/v2\/media?parent=20104"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/help.desk365.io\/en\/wp-json\/wp\/v2\/doc_tag?post=20104"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}