What it means
User consent allows an app to use permitted delegated access associated with a user, subject to the organization's policy. Admin consent can grant requested permissions on behalf of a broader organization and may enable highly privileged access. Some apps require admin review because a regular user cannot authorize the requested scope.
A real-world example
A note-taking app requests basic profile access, while another integration asks to read all mailboxes. Both may show a familiar Microsoft sign-in screen, but their consequences differ sharply.
What to do
Read the exact permission list, app publisher and business reason. Send broad or unclear requests through the organization's administrator review rather than approving under pressure.
The distinction that matters
An official consent screen validates the identity platform, not the trustworthiness of the third-party app. User consent can also create risk; admin consent is especially sensitive because the reach can extend beyond one account. Microsoft describes both flows and the optional approval workflow.
Microsoft's consent concepts Microsoft's review process
