> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Need Admin Approval

## How an Admin can give permissions

### Option 1: Allow users to give their consent

1. Go to the Microsoft [Entra admin center](https://entra.microsoft.com).

2. On the left hand menu, choose **Applications** > **Enterprise applications** > **Consent and Permissions** > **User consent settings**.

3. There are three settings that control the authentication for the user:

   a. Do not allow user consent

   b. Allow user consent for apps from verified publishers, for selected permissions (Recommended)

   c. Allow user consent for apps

   <img src="https://mintcdn.com/blinkops-2/6JIG4C9X2ValYH_B/img/MicrosoftAdminConsent/Consent_and_permissions1.png?fit=max&auto=format&n=6JIG4C9X2ValYH_B&q=85&s=0ab8b79855b496f88b31b4d4eade7018" alt="Admin_center" width="3320" height="1622" data-path="img/MicrosoftAdminConsent/Consent_and_permissions1.png" />

### Option 2: Allow Users to Request Admin Consent

1. Navigate to the **Admin consent settings**.

2. Toggle the button to “yes” to enable "Users can request Admin consent to apps they are unable to consent to".

   <img src="https://mintcdn.com/blinkops-2/6JIG4C9X2ValYH_B/img/MicrosoftAdminConsent/Consent_and_permissions_2.png?fit=max&auto=format&n=6JIG4C9X2ValYH_B&q=85&s=c1f20dc3aff1cdddd0a821bf7305e3b2" alt="Consent" width="3336" height="1616" data-path="img/MicrosoftAdminConsent/Consent_and_permissions_2.png" />

3. Next, go to the **Admin Consent Requests** section. All your requests will be listed on the pending page, where you can manage them.

   <img src="https://mintcdn.com/blinkops-2/6JIG4C9X2ValYH_B/img/MicrosoftAdminConsent/Enterprise_app.png?fit=max&auto=format&n=6JIG4C9X2ValYH_B&q=85&s=30f7a28847309b55a20985800cb5da8e" alt="Enterprise_App" width="3286" height="1610" data-path="img/MicrosoftAdminConsent/Enterprise_app.png" />

4. **Optional** - Add more users who can review admin consent request.

   <img src="https://mintcdn.com/blinkops-2/6JIG4C9X2ValYH_B/img/MicrosoftAdminConsent/Consent_and_permissions3.png?fit=max&auto=format&n=6JIG4C9X2ValYH_B&q=85&s=8b9e02d0ffe827224427f17e32c8cda2" alt="Consent3" width="1966" height="928" data-path="img/MicrosoftAdminConsent/Consent_and_permissions3.png" />

   a. Register user(s) who has an email inbox as a reviewer by pressing the **+ Add users** button.

   b. This step is **optional** - Toggle the button to “Yes” to enable the following setting: “Selected users will receive email notifications for request”.

   c. This step is **optional** - Toggle the button to “Yes” to enable the following setting: “Selected users will receive request expiration reminders”.

5. After completing the above steps, the below notification will appear for users who cannot give admin consent themselves.

   <img src="https://mintcdn.com/blinkops-2/6JIG4C9X2ValYH_B/img/MicrosoftAdminConsent/approval_required.png?fit=max&auto=format&n=6JIG4C9X2ValYH_B&q=85&s=b0416ecb613a6ee0501d329dbdd8c0e1" alt="Approval_Required" width="872" height="1482" data-path="img/MicrosoftAdminConsent/approval_required.png" />
