TeamsFixer
AADSTS90094 Severity: Medium

Admin consent required

Teams or an integrated app requests permissions only a global admin can grant.

Last verified:

Affected systems

windows macos web

Symptoms

  • AADSTS90094 with 'Admin consent required'
  • When adding a third-party app in Teams
  • On first sign-in to a new Teams extension

Possible causes

  • App requests permissions beyond standard user scope
  • Tenant disallows user consent for external apps
  • New Microsoft Graph permissions in the app manifest

Solutions

1.Request admin consent

  1. Click the 'Request admin approval' link in the error.

  2. A ticket is sent automatically to your IT.

  3. Wait for the admin to approve - then try again.

2.Verify the app vendor

  1. Make sure the app is from the official vendor.

  2. For suspicious apps, cancel rather than request admin approval.

3.Use first-party apps

  1. Microsoft first-party apps (OneDrive, Planner, etc.) usually need no admin consent.

  2. Discuss third-party apps with IT before first use.

AADSTS90094 is not a bug, it is a security feature. It blocks malicious apps from silently reading organization data.