Menu
View Categories

Microsoft says admin approval is needed

When you sign in with Microsoft, you see “Need admin approval”, and SheetCourier says:

Your organization needs to approve SheetCourier before it can send email for you. Forward the ready-made message to your IT admin. After they approve it, sign in again.

Why it happens #

Many companies only allow apps their IT admin approved. SheetCourier asks only to send mail as you, read your basic profile and stay signed in. It can’t read your mailbox.

Fix it #

  1. On the Microsoft 365 setup screen, click Copy a message for your IT person. SheetCourier copies a short message with the app’s ID, publisher and the permissions it needs.
  2. Paste it into an email to your IT admin.
  3. Your admin approves SheetCourier in the Microsoft Entra admin center: Enterprise applications, search for the application ID, then Permissions and Grant admin consent. Microsoft’s steps: Grant tenant-wide admin consent to an application.
  4. After they approve it, click Sign in with Microsoft again.

For IT admins #

SheetCourier is a public desktop app by Bosau Digital LLC (pythonandvba.com). Application (client) ID: 7502db2d-c34d-4b0b-81d9-45bbf55260d8. It asks only for the delegated Microsoft Graph permissions Mail.Send, User.Read and offline_access, and sends through POST /me/sendMail as the signed-in person. It can’t read mailboxes.

If SheetCourier isn’t listed under Enterprise applications yet (nobody in your organization has signed in), open this admin consent link while signed in as a Global Administrator, Cloud Application Administrator or Application Administrator, and click Accept:

https://login.microsoftonline.com/organizations/adminconsent?client_id=7502db2d-c34d-4b0b-81d9-45bbf55260d8&redirect_uri=http%3A%2F%2Flocalhost

Microsoft then shows the same permissions and approves them for everyone in your organization. Afterwards the browser may land on a localhost page that can’t be reached; that is expected for a desktop app, and the approval is saved.

Other messages #

  • “Your IT admin hasn’t given you access to SheetCourier yet”: the app is approved but not assigned to you. Forward the message and ask them to assign it.
  • “Your organization’s security rules blocked this sign-in”: for example only company devices may sign in. Ask your IT admin, or use Outlook on this PC.

While you wait, Outlook on this PC sends through your work account in classic Outlook without any approval: Connect Outlook on this PC.