When integrating Minga with your Microsoft environment, certain permissions must be granted at the directory level. If this consent is missing, users may encounter "Need admin approval" messages or authentication failures. This guide outlines how to verify and apply the necessary administrative permissions to restore SSO functionality.
Permission Level Needed: Owner | District Manager
In this article:
Common Error Messages: What to look for if access has not been granted.
Granting Minga Access: How to grant Minga tenant-wide access to allow for SSO logins.
Common Error Messages
There are a few common error messages or phrases users will encounter when trying to log in through the Microsoft SSO that indicate Minga has not been granted access:
Institution's admin needs to review minga.io: You can't access this app until an admin at your institution reviews and configures access for it.
Needs admin approval: needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it.
Granting Minga Access
To grant Minga access, an Azure Global Administrator must grant consent for the entire tenant. There are a few requirements that an individual needs to complete this action.
Administrator Requirements
To grant the necessary permissions for the Minga integration, you must signed in to a Microsoft Entra (Azure AD) account with one of the following administrative roles:
Privileged Role Administrator: Required if you need to grant consent for all permissions and APIs, including high-level access.
Application Administrator (Cloud or AI): Ideal for standard setups. These roles can grant consent for most permissions, with the exception of specific Microsoft Graph app roles.
Custom Directory Role: You can also use a custom role, provided it includes the specific permissions required to authorize third-party applications.
Minga Pro-Tip: We recommend using a Global Administrator or Privileged Role Administrator account for the initial setup to ensure a smooth, one-time consent process for your entire organization.
For a complete step-by-step guide, refer to Microsoft's help article, Grant tenant-wide admin consent to an application.
Resources