+Granting tenant-wide admin consent requires you to sign in as a user that is authorized to consent on behalf of the organization. This includes [Global Administrator](../roles/permissions-reference.md#global-administrator) and [Privileged Role Administrator](../roles/permissions-reference.md#privileged-role-administrator). For applications which do not require application permissions for Microsoft Graph, this also includes [Application Administrator](../roles/permissions-reference.md#application-administrator) and [Cloud Application Administrator](../roles/permissions-reference.md#cloud-application-administrator). A user can also be authorized to grant tenant-wide consent if they are assigned a [custom directory role](../roles/custom-create.md) that includes the [permission to grant permissions to applications](../roles/custom-consent-permissions.md).
0 commit comments