“We have PaperCut Scan to OneDrive for Business enabled in our environment. I am the IT admin and acting as the admin for our Azure tenant. Currently, users are not able to consent to the access that PaperCut is requesting. I do not want to give them more access than needed to consent to this app. As an admin, can I consent for PaperCut to access information for all users so that users do not need to individually consent?”
When users attempt to authorize the Scan to OneDrive for Business application for the first time, they receive a “Need admin approval” error message.
This occurs when the option Do not allow user consent is selected in your organization’s Azure Active Directory. When this option is selected, admins must grant consent for end users and group owners to use any application.
For users to be able to use Scan to OneDrive for Business without requiring an admin’s approval, an Azure administrator must grant tenant-wide consent to the application, allowing it to access user data on behalf of all users.
This article explains how an Azure administrator can grant this consent.
Granting consent for users to use “Scans for PaperCut MF”
To grant administrator consent for the Scans for PaperCut MF application:
- Log in to the Azure portal as a user with administrator privileges.
- Navigate to Azure Active Directory > Enterprise applications > All applications.
- Select the Scans for PaperCut MF application.
- In the application menu, under the Security heading, click Permissions.
- Click the Grant admin consent for [Your Organization Name] button. A new window opens asking you to review the permissions the application requires.
- Click Accept.
- After you click Accept, you might be redirected to a PaperCut MF page with a “Something went wrong” error. This is an expected behavior and you can safely close this window.
- To verify that consent was granted, return to the Permissions page for the Scans for PaperCut MF application in Azure Active Directory and check permission has been granted. Go to Enterprise applications > All applications > Scans for PaperCut MF > Security > Permissions. The table should now show that the administrator has granted consent.
Users can now authorize the Scan to OneDrive for Business application without receiving the “Need admin approval” error.
Comments