Approve Microsoft 365 apps using the App Consent Grant utility
When Microsoft 365 apps registrations are assigned, they are initially in an inactive state. A Global Administrator in your organization must approve admin consent to activate these apps. This approval can be done either manually (See Manually approve Microsoft 365 apps registration.) or using the App Consent Grant Utility (See Approve Microsoft 365 apps using the App Consent Grant utility.).
Approving admin consent grants the necessary permissions and access rights to perform backup and restore operations. Follow these steps to manually approve (grant admin consent) for Microsoft 365 app registration.
You must have Global Administrator permissions in Microsoft Entra ID (Azure AD) to approve app registration.
The App Consent Grant Utility must be installed on a Windows computer with the required administrative rights.
Ensure pop-ups are allowed in the browser, as Microsoft's sign-in page may require additional authentication steps.
- On the Windows computer on which the utility is installed, click Start > Cohesity Alta SaaS Protection > Apps Consents Grant Utility.
Note:
If the currently logged-on user is not the computer administrator, run the utility as Administrator.
The Apps Consents Grant Utility window opens.
- Click Next.
- On the Process apps window, do the following:
From the Microsoft 365 domain dropdown list, select the required domain for which the application requires consent.
Click Fetch Inactive Apps.
The inactive applications in the selected domain are listed on the Fetching Inactive Apps(s) window.
Click Close.
All the inactive applications are listed on the Process apps window, with IDs and names.
Click the apps that are to be granted and click Grant Consent.
On the logon window, enter credentials for the Microsoft 365 Global Administrator and then click Sign in.
Click Close.
The Apps consents grant summary field displays the summary, such as which application's granting is completed successfully and which is not.
The event logs are displayed on the window.
Click Close.
The granted applications are listed as Active applications on the Credentials tab.
Open the Cohesity Alta SaaS Protection Administration Portal.
On the page, select the required active apps.
Click to configure custom backup policies.