title: App needs permission to access resources in your organisation that only an admin can grant
body: <p>We have created a converged application for a public community(AD &amp; live users can login) using Microsoft Graph and the scopes openid, email, profile and user.readBasic.all.</p>
  
  <p>Every thing works fine for live users but some of AD users are not able to login. When they try to login they get the message as</p>
  
  <blockquote>
    <p>"App needs permission to access resources in your organization that
    only an admin can grant. Please ask an admin to grant permission to
    this app before you can use it."</p>
  </blockquote>
  
  <p>as per Microsoft <a href="https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-v2-scopes#requesting-consent-for-an-entire-tenant" rel="noreferrer">document</a> we have prepared admin consent url as </p>
  
  <p><code>https://login.microsoftonline.com/&lt;TenantID&gt;/oauth2/authorize?client_id=&lt;AppID&gt;&amp;response_type=code&amp;redirect_uri=&lt;RedirectURI&gt;&amp;prompt=admin_consent</code></p>
  
  <p>After admin consent also users are not able to login to the app. Please help us what we are missing here.</p>