The Microsoft 365 administrator must review SciSpace’s requested permissions and, only if the application and publisher are trusted, grant consent in Microsoft Entra; this prompt indicates a tenant application-consent restriction, not a Teams connectivity failure.
Administrator resolution
- Sign in to the Microsoft Entra admin center using an account authorized to grant the permissions SciSpace requests.
- Go to Entra ID → Enterprise applications → All applications.
- Search for SciSpace.
- Verify the application identity, publisher, application/client ID, and requested permissions with SciSpace before approving it.
- The unverified label requires additional scrutiny. Do not approve solely to remove the prompt.
- Open SciSpace → Permissions and review each delegated or application permission.
- If the permissions and publisher are acceptable, access SciSpace as an administrator. On the consent screen:
- Review the permissions again.
- Select Consent on behalf of your organization.
- Approve the request. Microsoft documents this as the direct resolution for a Need admin approval consent error.^1^
- Have the affected user close the SciSpace sign-in window, reopen the link from Teams, and sign in again.
Tenant-wide consent is sensitive because it can give an external application access to organizational data. If the administrator cannot establish who controls SciSpace or why a requested permission is needed, consent should not be granted until the vendor provides that information.^2^
If approval must follow an internal request workflow
A Global Administrator can enable the Entra admin-consent workflow:
- Go to Entra ID → Enterprise apps → Consent and permissions → Admin consent settings.
- Set Users can request admin consent to apps they are unable to consent to to Yes.
- Assign reviewers and configure request notifications.
- Select Save. Activation can take up to one hour.^3^
- The user should then reopen SciSpace, enter the business justification on the Approval required screen, and select Request approval.
Being designated as a reviewer does not automatically provide authority to grant every requested permission; the reviewer must also hold an appropriate administrator role.
If consent succeeds but access remains blocked
Check these items in Entra ID → Enterprise applications → SciSpace:
- Properties → Assignment required: if enabled, assign the affected user or group to SciSpace. Tenant-wide consent alone does not override assignment requirements.^1^
- Permissions: compare the granted permissions with those requested during sign-in. A new or missing scope can produce another approval prompt.
- Confirm that the correct SciSpace enterprise application was approved by comparing its application/client ID with the ID in the sign-in request.
Teams app approval is separate
Because this is a web link in a chat or channel, start with Microsoft Entra consent. If SciSpace is also installed as an actual Teams application, a Teams administrator must separately check Teams admin center → Teams apps → Manage apps → SciSpace to ensure it is allowed. The Permissions tab displays requested permissions, but only a Global Administrator can grant organization-wide consent for Microsoft Graph permissions.^4^
If SciSpace does not appear in Enterprise applications, or its identity and requested permissions cannot be validated, collect the timestamp, affected username, correlation/request ID from the error details, and the SciSpace application/client ID, then escalate to the Microsoft 365 administrator and SciSpace support rather than bypassing the tenant policy.
References
- Troubleshoot consent issues in Microsoft Entra ID
- Overview of user and admin consent
- Configure the admin consent workflow - Microsoft Entra ID
- Grant and manage consent to Teams app permissions - Microsoft Teams