Update the relevant documentation, monitoring, automation, and so on.Review your organization's existing processes for users to request administrator approval for an application, and update them if necessary.

Process changes and educationĬonsider enabling the admin consent workflow to allow users to request administrator approval directly from the consent screen.Įnsure that all administrators understand the permissions and consent framework, how the consent prompt works, and how to evaluate a request for tenant-wide admin consent. These steps are crucial to minimize impact on your organization's support team and IT administrators, and to help prevent the use of un-managed accounts in third-party applications. For apps that don't meet these criteria, the decision-making process will be centralized with your organization's security and identity administrator team.Īfter you've disabled or restricted user consent, you have several important steps to take to help keep your organization secure as you continue to allow business-critical applications to be used. Microsoft recommends that you restrict user consent to allow users to consent only for apps from verified publishers, and only for permissions that you select.

Nine for office 365 need admin approval