🚀Finobi v1 is here!See what's new

All Guides

Basics

Microsoft Admin Consent

Learn how to provide admin consent for Finobi WebApp - either for the entire organization or for select users

Overview

This guide is applicable when you need to provide admin consent for Finobi after the initial registration process. This may be needed if:

  • You did not grant consent "on behalf of the organization" during the initial registration process
  • You want to change from organization-wide access to select users only
  • You need to manage user access permissions after initial setup

As a Microsoft Admin, you have two options for providing admin consent for the Finobi:

  1. Organization-wide consent - Grants access to all users in your organization
  2. Select users consent - Grants access only to specific users you designate

Choose the option that best fits your organization's security requirements and user management preferences.

Option 1: Organization-wide Admin Consent

This option grants Finobi permissions for all users in your organization automatically.

Steps for Organization-wide Consent:

  1. Go to Microsoft Entra Admin Center
  2. Navigate to Enterprise Applications
  3. Select All Applications
  4. Find and click on Finobi WebApp
  5. In the left pane, under Security subsection, click on Permissions
  6. Click on Grant Admin Consent for 'your org name'

Option 2: Select Users Admin Consent

This option allows you to grant access only to specific users while requiring assignment approval for others.

Step 1: Enable Assignment Requirement

Enable Assignment Requirement:

  1. Go to Microsoft Entra Admin Center
  2. Navigate to Enterprise Applications
  3. Select All Applications
  4. Find and click on Finobi WebApp
  5. In the left pane, under Manage subsection, click on Properties
  6. Change the Assignment Required setting to Yes
  7. Click Save

Step 2: Assign Users

Add Specific Users:

  1. In the same Finobi WebApp application page
  2. In the left pane, under Manage subsection, click on Users and groups
  3. Click Add user/group
  4. Select the users you want to grant access to
  5. Assign appropriate roles if needed
  6. Click Assign

Important Notes

⚠️ Security Considerations

  • Organization-wide consent is faster to implement but gives access to all users in your organization
  • Select users consent provides better security control but requires manual user management
  • You can switch between these approaches at any time by modifying the Assignment Required setting
  • Users not granted access will see an error message when trying to sign in to Finobi and depending upon your Microsoft organization settings they will get a prompt to request access from admin.

Troubleshooting

Common Issues:

  • Permissions not taking effect: Changes may take a few minutes to propagate across Microsoft services
  • Users still can't access: If using select users option, verify the users are added to the Users and groups section