What does the "Admin Consent" button do when adding a SharePoint Online site via O365?

What does the "Admin Consent" button do when adding a SharePoint Online site via O365?

What does the "Admin Consent" button do when adding a SharePoint Online site via O365?

Modified on: Tue, 22 Oct, 2024 at 4:04 PM

Office 365 Authentication – Admin Consent Requirement

The Admin Consent process is required to enable Office 365 authentication for LinkFixer Advanced. This process includes two primary components:

1. Application Registration and Authorization in Azure

LinkFixer Advanced must be registered and authorized in Azure AD (Entra ID) to use modern authentication protocols. This enables support for security features such as Multi-Factor Authentication (MFA).

Once registered, the application appears as an Enterprise Application within Azure Active Directory (Entra ID).

As part of the registration process, a Global Administrator must grant consent on behalf of the organization. This is a one-time action performed by:
  1. Clicking the Admin Consent button
  2. Signing in with Global Administrator credentials
Important:
  1. Global Administrator credentials are not stored at any time
  2. These credentials are not used to access or process SharePoint Online data
  3. This step is strictly for application registration and authorization

Permissions and Access Control

Although LinkFixer Advanced is assigned the AllSites.FullControl permission, this does not provide unrestricted access to the entire SharePoint Online tenant.
Access is limited by the following:

      • Site Collection Scope

            The application can only access site collections explicitly added under:
             {☰} Main Menu | Network Locations

      • Site Collection Administrator Privileges

Any modifications within a site collection require the authenticated Office 365 account to be a Site Collection Administrator.
If the account does not have this role, the application will not have access to make changes.

Additional Notes

  1. No changes will be made to your SharePoint sites or files without the appropriate permissions
  2. The Global Administrator account used during consent is not involved in ongoing operations
  3. Admin consent does not grant unrestricted access to users within the software
1. Go to Main Menu (☰) | Network Locations



2. Click the {Add} button (top-left)



3. Select SharePoint



4. Enter the root SharePoint URL and press {Enter}
5. In the Authentication field, select "Office 365 with admin consent"



6. Click the {Admin Consent} button



7. Complete the standard Office 365 authentication process
8. After completion, click {Sign In} using a Site Collection Administrator account