Microsoft 365 · Admin consent
Administrator Approval Required
Your organization requires Microsoft 365 administrator approval before employees can sign in to NiceFound.
Administrator account required
You are signed in with a [Your company name] organization account. Only a Microsoft Global Administrator can approve this application.
Sign in using a Microsoft 365 Global Administrator account for [Your company name]. If the browser is already signed in as a standard user, open the admin center in a private window or switch accounts first — the approval button is hidden for accounts without the role.
Global Administrator, Privileged Role Administrator, Cloud Application Administrator and Application Administrator can all grant this consent.
https://entra.microsoft.comIn the left-hand navigation of the admin center, follow this path:
Enterprise applications lists every third-party app your tenant knows about. NiceFound appears here as soon as the first employee has attempted to sign in — which is what produced the approval screen.
Use the search box at the top of the application list. Either term finds it:
NiceFoundNiceFoundnicefound.com · Enterprise applicationNiceFoundor
nicefound.comNothing found? Set the Application type filter to All applications — the default view hides apps that have no assigned users yet.
Open the NiceFound application, then in its left-hand menu navigate to:
Then click:
A Microsoft consent window opens listing the permissions below. Review them and choose Accept. The grant applies to every user in [Your company name], so no employee will see the approval screen again.
Consent can be withdrawn at any time from the same Permissions page, and takes effect on each user's next sign-in.
Wait approximately 1–2 minutes while Microsoft replicates the grant across your directory. Users can then sign in successfully — ask anyone holding the error page to close that tab and start a fresh sign-in rather than refreshing it.
Admin approval completed successfully.
Employees at [Your company name] can now sign in to NiceFound with their Microsoft account.
Questions
Frequently asked questions
Your Microsoft 365 tenant has user consent turned off — the default for most organizations. When an employee signs in to NiceFound for the first time, Microsoft stops at "Need admin approval" instead of letting them approve the app themselves, and points them at an administrator. Nothing has failed and nothing is misconfigured on either side; the tenant is simply waiting for a one-time approval.
A Global Administrator, Privileged Role Administrator, Cloud Application Administrator or Application Administrator in your Microsoft Entra tenant. A NiceFound account cannot grant it — including an owner or billing account. The approval is made inside your own Microsoft tenant, by your own staff.
The approval grants sign-in and basic profile reads only: name, work email and profile photo. NiceFound never receives anyone’s password, and it cannot read mail, files, calendars, Teams messages or directory data — those permissions are not requested, so they cannot be consented to here. The grant is tenant-wide but revocable at any time from Enterprise applications, and revoking it takes effect on the next sign-in.
The consent itself is a single click and applies immediately. Microsoft then takes roughly one to two minutes to replicate the grant across the directory, so ask affected users to close the Microsoft error tab and sign in again after a short wait rather than retrying instantly.
Five delegated scopes: User.Read, openid, profile, email and offline_access. Delegated means every call NiceFound makes is on behalf of a signed-in user and is limited to what that user can already see. There are no application permissions in this request, so nothing runs against your tenant when no one is signed in.