Troubleshooting
Admin Approval Required
Symptom:
- The sign-in page says administrator approval is required for Microsoft Graph Command Line Tools.
Meaning:
- The tenant does not allow user consent for the current client app and requested delegated scopes.
What to do:
- Ask a tenant admin to approve the app.
- Or switch to a tenant-approved custom app registration.
- Re-sign in after switching the client ID and tenant ID.
403 ErrorAccessDenied On Writes
Symptom:
GET /meworks, butPOST /me/sendMailorPOST /me/eventsreturns403 ErrorAccessDenied.
Meaning:
- Authentication succeeded, but the token or app policy does not allow the requested write scopes.
What to do:
- Check whether the tenant approved
Mail.SendorCalendars.ReadWritefor the active client app. - Re-sign in with a tenant-approved app registration.
- Retry a read first, then retry the write.