What you’re seeing
- A Microsoft sign-in page showing "AADSTS65001: The user or administrator has not consented to use the application".
- A "Need admin approval" screen when connecting a CRM, scheduling tool or add-in to Microsoft 365.
- The integration works for one person, often the admin who set it up, but fails for everyone else.
- An approval request button that seems to go nowhere because nobody receives or acts on the request.
Common causes
Every environment is different, but these are the causes our engineers find most often:
- The tenant blocks ordinary users from granting apps access to company data, so an administrator must approve the app once for the whole organization.
- The app asks for permissions, such as reading all mailboxes or files, that only a Global Administrator or Privileged Role Administrator can grant.
- A vendor updated its app to request new permissions, which invalidates the consent given earlier.
- The admin consent workflow is switched off or has no reviewers assigned, so approval requests are never routed to anyone.
- Consent was granted in a different tenant, such as a trial or old company account, rather than the one users sign in to.
Why it matters
Third-party apps are how many small businesses connect accounting, scheduling, e-signature and CRM tools to their email and calendars. When consent is missing, those connections simply stop, and staff fall back to manual copying, double entry and missed appointments. The tempting shortcut is to approve everything an app asks for, which can hand a vendor read access to every mailbox in the company. Getting consent right balances keeping work moving with keeping company data out of the wrong hands.
How AskTechGurus fixes it
Skip the trial and error. A certified engineer works on your actual system, finds the root cause, and fixes it properly.
Tell us what’s happening
Submit a ticket in about two minutes. Paste the error, describe what changed, and pick your tier. No charge to submit.
A certified engineer diagnoses it
A vetted, US-based systems engineer claims your ticket, usually within minutes during business hours, and investigates over a secure remote session you can watch and end at any time.
Fixed and verified with you
The engineer resolves the root cause and confirms with you that it’s working. You don’t just get a workaround, and you get a plain-English summary of what was wrong.
Pay only when it’s resolved
Fixed price from $99, invoiced only after you approve the fix. If it isn’t resolved, you don’t pay.
Frequently asked questions
Is it safe to just approve the app for everyone?
Only after someone reviews what the app is asking for. Many apps request far broader access than they need, and a tenant-wide approval applies to every user's data.
Why can't my staff approve it themselves?
Microsoft 365 often restricts user consent on purpose, because attackers use fake apps to trick people into granting access. An administrator approval is the safety check.
Can AskTechGurus sort out the consent for us?
Yes. A certified US engineer can review the app's permissions with you over a remote secure session and grant the right level of access, from $99, and you pay only when it's resolved.