If your organisation’s Azure consent settings require admin approval, users cannot grant access to the People Insight app themselves. This guide explains the steps for both line-of-business users and IT or Azure admins to ensure access to People Insight is granted smoothly.
Understanding authentication vs authorisation
People Insight uses Microsoft 365 for authentication, which verifies user identity, while authorisation determines what users can access within the app. For more information on how People Insight handles authentication and authorisation, please refer to our Single Sign-On (SSO) with Microsoft 365 and Google article.
Step 1: End-users check your organisation’s consent settings
Before involving IT, end-users should first check the organisation’s consent settings. Here’s how:
Access the People Insight app URL: Navigate directly to the People Insight app using its URL.
Click the "Sign in with Microsoft" button: When you click this button, you will see the consent window, which indicates your organisation’s consent settings:
If access is granted: If you are allowed to consent on behalf of yourself or the organisation, you will be able to log in and access the app without further action.
If you see a “Please contact your admin” message: This means admin consent is required, and you do not have the permissions to grant access. At this point, you will need to get your IT or Azure admin involved to complete the consent process.
Step 2: Requesting access from your IT or Azure admin
If you receive the “Please contact your admin” message, follow these steps to request access:
Identify your IT or Azure admin: Reach out to your internal IT support or identify the person/team responsible for managing Azure permissions.
Explain the need for admin consent: Let the IT admin know that they need to grant consent for the People Insight app and that they will need to be temporarily added to the application as a user to do so.
Adding the admin to People Insight: Your People Insight contact will need to add the IT admin to the system to enable them to log in and see the consent window. Once the admin has granted consent, they can be removed from the system.
Step 3: Steps for IT or Azure admin to enable access
There are two ways for an IT admin to grant consent: by accessing the app directly or by using the Azure portal.
Option 1: Direct access via the app:
Contact People Insight to add the IT admin as a user: The IT admin must be added to the People Insight system as a user before they can log in and provide consent. Reach out to your People Insight contact to manage this process. The admin can be removed from the system after consent is granted.
Access the app: Once added, the Azure admin should go directly to the People Insight app URL and click the "Sign in with Microsoft" button. This will trigger the consent request screen.
Review the requested permissions: Before granting consent, carefully review the permissions requested by the People Insight app. Ensure they align with your organisation’s security policies and that the app’s access level is appropriate.
Grant consent: The admin will see an option to consent on behalf of your organisation. By selecting this option and clicking accept, the admin grants access to all users within the organisation.
Option 2: Grant consent via the Azure portal:
Log in to the Azure portal: Go to Azure Portal and sign in with admin credentials.
Navigate to Enterprise Applications: In the left-hand menu, select “Enterprise applications.”
Grant admin consent: Open the app’s settings, go to the “Permissions” section, and click Grant admin consent for [Your Organisation]. Confirm if prompted. This will enable the app for all users.
Important notes
Variations in steps and user interface: The exact steps and appearance of the consent window may vary depending on the version of Azure AD and the specific configuration of the People Insight app. Always refer to any prompts or guidance within the interface to ensure you are following the correct procedure.
Troubleshooting
Access denied: If access is denied, ensure the admin has the correct permissions to grant access.
Cannot access the consent window: Make sure the admin is accessing the correct URL for the People Insight app and that they are signed in with appropriate admin privileges.
For more information on managing admin consent settings in Azure, please refer to the Microsoft documentation here.