Symptoms

---

During the Set up Microsoft Office 365 integration procedure, you may encounter the below error message at step #2:

YOUR_APPLICATION application Needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it. 

 

Cause

---

This is not an issue with the configuration. When we try to set-up Office-365 integration, we need to access the users and reports information. For this we configure the secrets in the step 1.C. This needs admin consent (approval). So once we set-up the secrets, a user with admin access needs to consent this then only the secrets are fulfilled.

 

Resolution

---

Login as admin user into the Application Registration Portal and approve/consent the requests:

 

 

Additional Resources

---

 

https://social.msdn.microsoft.com/Forums/office/en-US/0c3bbb38-468c-4e4b-9fcf-cbe42bb3dfda/aadsts90093-this-operation-can-only-be-performed-by-an-administrator-but-user-is-a-global-admin?forum=WindowsAzureAD 

https://nicksnettravels.builttoroam.com/post/2017/01/24/Admin-Consent-for-Permissions-in-Azure-Active-Directory.aspx 

https://blogs.msdn.microsoft.com/aaddevsup/2018/05/08/receiving-aadsts90094-the-grant-requires-admin-permission/ 

https://social.msdn.microsoft.com/Forums/office/en-US/0c3bbb38-468c-4e4b-9fcf-cbe42bb3dfda/aadsts90093-this-operation-can-only-be-performed-by-an-administrator-but-user-is-a-global-admin?forum=WindowsAzureAD