SAMP Office 365 Setup Error "YOUR_APPLICATION application Needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it." - Support and Troubleshooting

SAMP Office 365 Setup Error "YOUR_APPLICATION application Needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it." Description  Symptoms During the Set up Microsoft Office 365 integration procedure, you may encounter the below error message at step #2:

YOUR_APPLICATION application Needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it.

Cause This is not an issue with the configuration. When we try to set-up Office-365 integration, we need to access the users and reports information. For this we configure the secrets in the step 1.C. This needs admin consent (approval). So once we set-up the secrets, a user with admin access needs to consent this then only the secrets are fulfilled.

Resolution Login as admin user into the Application Registration Portal and approve/consent the requests:

Additional Resources

https://social.msdn.microsoft.com/Forums/office/en-US/0c3bbb38-468c-4e4b-9fcf-cbe42bb3dfda/aadsts90093-this-operation-can-only-be-performed-by-an-administrator-but-user-is-a-global-admin?forum=WindowsAzureAD

https://nicksnettravels.builttoroam.com/post/2017/01/24/Admin-Consent-for-Permissions-in-Azure-Active-Directory.aspx

https://blogs.msdn.microsoft.com/aaddevsup/2018/05/08/receiving-aadsts90094-the-grant-requires-admin-permission/

https://social.msdn.microsoft.com/Forums/office/en-US/0c3bbb38-468c-4e4b-9fcf-cbe42bb3dfda/aadsts90093-this-operation-can-only-be-performed-by-an-administrator-but-user-is-a-global-admin?forum=WindowsAzureAD