Article
Microsoft Entra ID: Understanding OAuth App Consent and ...
thalpius.com
Quoted on this wiki
Every place a page here uses this source, in the order the words come in it.
Set a reminder interval for pending requests “Configure the reminder interval to ensure requests do not go unnoticed.” The Admin Consent Workflow is only effective when combined with restricted user consent settings. If users can consent freely, they will simply bypass the workflow by consenting themselves. The workflow should be treated as the controlled path for application access requests, not an optional addition on top of an already permissive consent configuration.
Configure whether reviewers receive email notifications when new requests are submitted “Set a reminder interval for pending requests” Recommended practice: Enable the Admin Consent Workflow and designate at least two reviewers to avoid a single point of failure. Reviewers should have sufficient technical knowledge to evaluate the permissions an application is requesting, not just the ability to approve requests. A helpdesk employee or manager is rarely the right choice. Configure the reminder interval to ensure requests do not go unnoticed.