All Guides

Basics

Microsoft Admin Consent

Learn how to provide admin consent for Finobi WebApp - either for the entire organization or for select users

Overview

This guide is applicable when you need to provide admin consent for Finobi after the initial registration process. This may be needed if:

  • You did not grant consent "on behalf of the organization" during the initial registration process
  • You want to change from organization-wide access to select users only
  • You need to manage user access permissions after initial setup

Important: Admin consent must be provided first. After providing admin consent, you can choose whether to allow all users to access the application or restrict application access to specific users only.

Step 1: Provide Admin Consent (Required)

Admin consent is mandatory and must be provided before users can access Finobi. This step grants the necessary permissions for the application to function.

Steps to Provide Admin Consent:

  1. Go to Microsoft Entra Admin Center
  2. Navigate to Enterprise Applications
  3. Select All Applications
  4. Find and click on Finobi WebApp
  5. In the left pane, under Security subsection, click on Permissions
  6. Click on Grant Admin Consent for 'your org name'

Step 2: Configure User Access (Optional)

After providing admin consent, you can choose how users access the application:

Option A: Allow All Users to Access (Default)

If you want all users in your organization to be able to access Finobi, no additional steps are required. After providing admin consent in Step 1, all users will be able to sign in to the application.

Option B: Restrict Access to Specific Users Only

If you want only specific users to be able to access Finobi, follow these steps:

Step 2.1: Enable Assignment Requirement

Enable Assignment Requirement:

  1. Go to Microsoft Entra Admin Center
  2. Navigate to Enterprise Applications
  3. Select All Applications
  4. Find and click on Finobi WebApp
  5. In the left pane, under Manage subsection, click on Properties
  6. Change the Assignment Required setting to Yes
  7. Click Save

Step 2.2: Assign Users

Add Specific Users:

  1. In the same Finobi WebApp application page
  2. In the left pane, under Manage subsection, click on Users and groups
  3. Click Add user/group
  4. Select the users you want to grant access to
  5. Assign appropriate roles if needed
  6. Click Assign

Important Notes

⚠️ Security Considerations

  • Admin consent is required before any users can access Finobi. This is a mandatory first step.
  • Allowing all users (default) is faster to implement but gives access to all users in your organization automatically.
  • Restricting to specific users provides better security control but requires manual user management by setting Assignment Required to Yes and adding users individually.
  • You can switch between allowing all users and restricting to specific users at any time by modifying the Assignment Required setting in Properties.
  • If Assignment Required is set to Yes, users not explicitly added in Users and groups will see an error message when trying to sign in to Finobi. Depending upon your Microsoft organization settings, they may get a prompt to request access from admin.

Troubleshooting

Common Issues:

  • Admin consent not provided: Ensure you have completed Step 1 and granted admin consent in the Permissions section
  • Permissions not taking effect: Changes may take a few minutes to propagate across Microsoft services
  • Users still can't access: If you've set Assignment Required to Yes, verify that the users are explicitly added in the Users and groups section
  • All users can access when you want restrictions: Verify that Assignment Required is set to Yes in Properties, and only intended users are added in Users and groups