title: Cannot give permissions to sign-in to my app, error "App needs permission to access resources in your organisation that only an admin can grant"
body: <p>I'm using OpenID Connect to authenticate users according to <a href="https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc" rel="nofollow noreferrer">https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-protocols-oidc</a>. I registered application in Azure AD and there are following user consents defined:</p>
  <p><a href="https://i.stack.imgur.com/SI2Gy.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/SI2Gy.png" alt="enter image description here" /></a></p>
  <p>The problem is that only 3 users are authenticated while others get error 90094 with message:</p>
  <blockquote>
  <p>Need admin approval</p>
  <p>App needs permission to access resources in your organisation that
  only an admin can grant. Please ask an admin to grant permission to this app before you can use it.</p>
  </blockquote>
  <p>These 3 users who can sign-in are the ones who granted &quot;Sign users in&quot; and &quot;Sign in and read profile&quot; permissions (visible under &quot;Granted By&quot; column links on the screenshot) and this is the only difference in Azure configuration between them and the rest who cannot sign-in. All of users have been added to app through &quot;Users and groups&quot; page with the same roles. All users are from the same company's directory. Api permissions looks like following</p>
  <p><a href="https://i.stack.imgur.com/JRVch.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/JRVch.png" alt="enter image description here" /></a></p>
  <p>Moreover I have setting</p>
  <p><a href="https://i.stack.imgur.com/xYChX.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/xYChX.png" alt="enter image description here" /></a></p>
  <p>I don't know how to grant permissions to other users and I don't know how to extend list of permissions visible on the screenshot.
  Any ideas?</p>
  <p>I wonder if any changes in Azure Portal happened since November 2019 when I created and configured that app. There where no changes in my permissions since that time, so I didn't have more power that time. I've read various documentation on MSDN about consents and permissions but didn't find solution.</p>