Articles in this section

Office 365 Admin Approval

Avatar
Nik Fowler
  • Updated
Follow
The Office 365 Global administrator can adjust your user settings to control how users authenticate against any enterprise application.
 

1. Get help from an admin:

First, get someone with the global administrator permissions to try the app, and see what happens. If it doesn’t work for them either, check out the next solution.
 

Need Admin Approval:

a. Update the User Settings:

To control if organization users, can authenticate against the Calendar.com or if an administrator needs to approve the application, you need to adjust your Enterprise Applications User Settings.
 
  • To adjust the need for Admin Approval:
    1. Navigate to the Azure AD portal with someone having the Global Administrator permissions.
    2. Go to Azure Active Directory > Enterprise applications > User settings.
    3. You will see there are two settings that control the authentication for the user.  Toggle both options to yes if you want users to authenticate themselves or toggle both to no to require administrative permission.
      • Users can consent to apps accessing company data on their behalf
      • Users can consent to apps accessing company data for the groups they own

b. User consent settings:

  • Calendar.com will need the following scopes so we can access their calendars on their behalf.
      1. openid
      2. email
      3. profile
      4. offline_access
      5. User.Read
      6. Calendars.ReadWrite
  • The Global administrator can control which permissions users are allowed to consent.
 
  • To configure those settings follow the following steps:
    1. Navigate to the Azure AD portal with someone having the Global Administrator permissions.
    2. Go to Enterprise applications > User consent settings.
    3. Select Allow user consent for apps from verified publishers, for selected permissions (Recommended)
    4. Click on Select permissions to classify as low impact.
    5. Add the permissions listed above.
    6. Save.
 

2. Require Admin Approval for access:

A Global administrator can configure if organization users need admin approval first for 3rd party calendar access. 
 
An Admin needs to set up the following user settings in Active Directory:
 
Afterward, Users will get the following page while connecting to their Office 365 calendar:
Next, a user will have to add a justification regarding why they want to sign in to this application. 
 
Admin steps to approve users:
a.  Navigate to Azure Active Directory > Enterprise applications > Admin consent requests > My Pending
b. Select Calendar.com
c. Preview and approve the requests
 
After approval, users from the organization can sign in on calendar.com.

Related articles

Comments

0 comments

Article is closed for comments.