AADSTS65001: The user or administrator has not consented to use the application

問題

When using Username and Password authentication with Microsoft 365 Scope, you encounter the following error: "AADSTS65001: The user or administrator has not consented to use the application with ID <appID> named <appName>. Send an interactive authorization request for this user and resource."

This error can occur when:

1. The application doesn't have any permissions configured.
2. The admin has not granted consent for the whole organization.
3. The admin granted consent, but specific Azure settings force the admin to send the authorization request and consent via the desktop app (e.g. UiPath).

解決策

For root causes 1 and 2:

1. Ask your Azure admin to access and edit the app registration.

2. Add the necessary permissions.

3. Grant consent on behalf of the whole organization. For more information, see Grant tenant-wide admin consent to an application.

For root cause 3: Even if the admin provided consent from the app registration, due to particular settings on the consent workflow, Azure is still preventing the authentication. To fix the issue:

1. Configure the Microsoft 365 Scope activity to perform an Interactive token authentication.

2. Run and debug the process.

3. When the consent prompt appears, have an admin log in.

4. As admin, grant consent on behalf of the organization. This is a one-time requirement per app registration. You can then change the authentication type back to Username and Password.