Article
Should You Allow User Application Consent?
practical365.com
Quoted on this wiki
Every place a page here uses this source, in the order the words come in it.
Solving the User Consent Problem “Users want to be able to consent to applications they want to use without requiring help from centralized IT staff (and the IT team doesn’t want to be bothered with ongoing noise from these requests).” The obvious suggestion that arises from this is to block users from consenting to applications on their own. This is draconian but effective. However, there are some intermediate options that may make more sense for your tenant, depending on how many users you have, how often they need to request permissions, and what other security mitigations you have in place.