Entra ID OAuth Admin Consent and Risky Permissions

Quoted on this wiki

Every place a page here uses this source, in the order the words come in it.

1. “Admin consent can have broad security implications for the entire university, so all requests must be carefully reviewed to balance business needs with security risks.” Need admin consent? Submit this form to request approval for an Entra application requiring admin consent.

   In Customer advocacy consent

2. Check for precedent: We review similar past approvals and any required mitigations or permissions we've decided not to grant. Some of these precedents are documented below. “Evaluate business necessity: We ensure the request doesn't exceed what's needed for the stated business purpose.” Balance risk and need: We aim to enable legitimate business use with minimal friction while properly mitigating risks involving UW confidential data.

   In Legitimate interest assessment