Entra ID OAuth Admin Consent and Risky Permissions

Quoted on this wiki

Every place a page here uses this source, in the order the words come in it.

1. Check for precedent: We review similar past approvals and any required mitigations or permissions we've decided not to grant. Some of these precedents are documented below. “Evaluate business necessity: We ensure the request doesn't exceed what's needed for the stated business purpose.” Balance risk and need: We aim to enable legitimate business use with minimal friction while properly mitigating risks involving UW confidential data.

   In Legitimate interest assessment

Quotes are verbatim and belong to their publishers. Where a quote has been translated, the original wording is kept below it.