Microsoft SharePoint: Grant Admin Consent in the Entra Tenant

The Microsoft SharePoint integration in smenso uses the app smenso FileBrowser. Without further approval, each person consents to the app's permissions for themselves on first access. A one-time approval in the Microsoft Entra tenant ("admin consent") approves the app for the whole organization: it may then access the linked SharePoint folders on behalf of all users. This article describes the three ways to grant the approval.

App details

• App name: smenso FileBrowser
• Application (client) ID: 2bcabcee-96b8-44ed-b88b-c505ab8b8cc6
• Publisher: Smart Enterprise Solutions GmbH (verified)

Requested permissions

The app requests the following permissions. They are all of type Delegated: the app acts only on behalf of the signed-in person (see section "After approval").

After approval, the permissions can be viewed in the Entra admin center under Enterprise applications > smenso FileBrowser > Permissions.

Which option applies?

The right option depends on who grants the approval and whether the app is already known in the tenant:

• Option 1: A person with one of the Entra admin roles listed above sets up the integration in smenso anyway.
• Option 2: A person with one of the Entra admin roles listed above should approve the app before anyone has started the integration in smenso.
• Option 3: A person without an Entra admin role has already opened the integration and consented for themselves only. A person with one of the Entra admin roles listed above should now grant the approval for the whole organization.

Option 1 – Approve during setup in smenso

1. Sign in to smenso with a user who has one of the Entra roles listed above.
2. Set up the SharePoint integration in the project settings as described in Link a Microsoft SharePoint Folder to a Project.
3. On first access, Microsoft guides you through a consent dialog.
4. Enable the option Consent on behalf of your organization and confirm.

The app is now approved for all users in the organization.

Option 2 – Pre-approve directly in Entra

This option is suitable if the app does not yet exist in the tenant. It is provisioned via a consent URL.

1. Open the following URL in a browser and replace <YOUR_TENANT_ID_OR_DOMAIN> with the tenant ID or a verified domain of the organization:
   https://login.microsoftonline.com/<YOUR_TENANT_ID_OR_DOMAIN>/adminconsent?client_id=2bcabcee-96b8-44ed-b88b-c505ab8b8cc6
   Example: https://login.microsoftonline.com/contoso.com/adminconsent?client_id=2bcabcee-96b8-44ed-b88b-c505ab8b8cc6
2. Sign in with an account that has one of the roles listed above.
3. Review the permissions shown and confirm the consent.

The app is created in the tenant and approved for all users.

Option 3 – Approve afterwards in the Entra admin center

This is a common case: A person without an Entra admin role has already opened the SharePoint integration in smenso. They can use the integration, but they consent to the permissions for their own account only, not for the whole organization. The app smenso FileBrowser has been registered in the tenant as a result and can now be approved afterwards.

1. Open the Microsoft Entra admin center.
2. Go to Entra ID > Enterprise applications > All applications.
3. Search for the app smenso FileBrowser.
4. Open Permissions.
5. On the tab Admin consent, select the button Grant admin consent for "Organization name".

The app is now approved for all users in the organization. Affected users can use the integration afterwards without further action.

After approval

• The SharePoint folders linked in projects are shown in the respective SharePoint tab and can be used, including upload.
• Each person's access still depends on their own SharePoint permissions for the folder. Approving the app does not extend them: users only see content they can also access directly in SharePoint.

Frequently Asked Questions (FAQ)

Why does Microsoft ask individual users for their consent?

Without admin consent, each person consents to the permissions for themselves only. With admin consent, the app is approved for the whole organization. A person with one of the Entra roles listed above can grant it at any time, most easily via Option 3.

What happens if users in our tenant are not allowed to consent to apps themselves?

Many organizations use an Entra policy that prevents users without an admin role from consenting to apps themselves. In that case, Microsoft shows a notice on first access that administrator approval is required, and the integration can only be used after admin consent. Use Option 1 or Option 2 in this case.

Does the app get access to all SharePoint content?

No. Permissions such as AllSites.Read or Sites.Read.All sound broad, but they are delegated: they only apply to content the signed-in person can access in SharePoint themselves. The app does not extend the person's SharePoint permissions.

Related Articles

• Link a Microsoft SharePoint Folder to a Project
• Attach files from OneDrive/SharePoint
• Integrations Overview