Medium

Admin consent workflow not enabled

Checks whether admin consent workflow is configured so that users can request access to apps that require administrator approval.

Category
Identity
Default severity
Medium
Rule key
CHECK_ADMIN_CONSENT_WORKFLOW
Last updated

How to fix it

Enable admin consent workflow so that users can request access to apps that require administrator approval.

Required Microsoft Graph permissions

EntraAnalyzer needs the following read-only Graph permissions to evaluate this rule:

  • Policy.Read.All

Further reading

Microsoft documentation →

Run this check on your tenant

EntraAnalyzer evaluates this rule automatically on every scan and emails you the results.

Get started — free first scan →