AADSTS90094 Severity: Medium Admin consent required
Teams or an integrated app requests permissions only a global admin can grant.
Last verified:
Affected systems
windows macos web
Symptoms
- AADSTS90094 with 'Admin consent required'
- When adding a third-party app in Teams
- On first sign-in to a new Teams extension
Possible causes
- App requests permissions beyond standard user scope
- Tenant disallows user consent for external apps
- New Microsoft Graph permissions in the app manifest
Solutions
1.Request admin consent
-
Click the 'Request admin approval' link in the error.
-
A ticket is sent automatically to your IT.
-
Wait for the admin to approve - then try again.
2.Verify the app vendor
-
Make sure the app is from the official vendor.
-
For suspicious apps, cancel rather than request admin approval.
3.Use first-party apps
-
Microsoft first-party apps (OneDrive, Planner, etc.) usually need no admin consent.
-
Discuss third-party apps with IT before first use.
AADSTS90094 is not a bug, it is a security feature. It blocks malicious apps from silently reading organization data.