Need Admin Approval

[Metworks_IT]

Hello,

I have a few users who cannot sign in with Microsoft, comes with an error:
"Appsheet needs permission to access resources in your organisation that only an admin can grant. "

Myself and most other users can sign in without issues, except 4 so far. I checked with our O365 AD admin but hey don’t know why as all users have the same profiles.

Any ideas how to sort it?

Gabriel

[Aleksi]

Is it possible that these users are using alias email addresses?

[Metworks_IT]

Don’t think so, it’s name.surname@company.

[Aleksi]

Have you solved this issue already? Or do you still need help with this one?

[Metworks_IT]

HI Aleksi,

Not sorted yet. There is a chance the problem is caused by our organisation migrating O365 servers. Users who already gave Appsheet permission can still sign in, new users can’t. Will revisit once migration is complete (end of January…)

Thank you,
Gabriel

[Aleksi]

I still believe the reason is alias email. What you’ll see for example in the “Left upper menu” is what Office tells us what user’s email address is. So, we don’t actually know what address they’re trying to log in as, we just send them to a Microsoft login page. Microsoft handles the login and then calls us back with the user id and the email. I would guess that new user’s Office account alias email is updated in a different way.

[James_McFarlane]

Hi @Aleksi, @Metworks_IT I am having the same issue any suggestions?

[kamila_klimek]

James - are you seeing similar behavior that allows some users who see this screen, when other can log in? Is there a possibility that the domain admin for your O365 account has not approved AppSheet?

[James_McFarlane]

Hi Kamila,

None of the users can access. Actually IT Directory has access to the AppSheet APP with out the prompt.

[James_McFarlane]

@kamila,

Our IT Manager was looking where to approve AppSheet. We looked at the following link but could not find where to do the approval…Any pointers?
https://docs.microsoft.com/en-us/cloud-app-security/manage-app-permissions

[kamila_klimek]

Hi James, unfortunately I am not very familiar with the Microsoft Cloud Security portal but I will try to help. When you go to: https://portal.cloudappsecurity.com/ and choose “Investigate” tab > “Oauth apps”, can your IT team see AppSheet listed there? If so, they should be able to approve from that view.

Alternatively, AppSheet might be blocked because of a policy that has been implemented for the organization. Here is how they can audit and edit existing policies that might be affecting AppSheet: https://docs.microsoft.com/en-us/cloud-app-security/app-permission-policy

[Jonathon]

James, if Kamila’s suggestions do not work you may also try the following:

---

The issue could be a policy on your organizations active directory which is requiring admin users to give consent for other domain users, instead of letting users grant the consent themselves.

Your IT must go to your organizations active directory on the azure portal. Here, there will be an enterprise application for AppSheet:

Have your IT team grant admin consent to the AppSheet enterprise application:

---

If this does not work, then your IT team could try assigning the AppSheet enterprise application to your default user group.

[James_McFarlane]

@Jonathon,

We found with your suggestion. Thanks!

[MNedermeijer]

Hi James, Just curious. How did you manage to solve this ? we are having the same issues.

thanks, Marco

[James_McFarlane]

Hi @MNedermeijer,

Sorry fo r the delay I was checking with our IT Guys. He said, had done it going into Azure Active Directory, for the specific user under Assign Roles. There he set permissions for Admin application, Admin conditional access, Admin Cloud Apps and Admin External Identity Providers .

Hope this helps.

[Asif_Khan]

Hi Jonathan,
In the case Appsheet is not registered in Enterprise Applications, can you also guide how to add it. Appsheet is not available in the Azure Active Directory Marketplace.

Thanks