rencore.com (opens in a new tab) Start a trial (opens in a new tab)
Guide

Give Power Platform consent with the admin consent workflow

Last updated Settings Consent Power Apps Power Automate

AI summary

Grant Rencore Governance consent for Power Platform when your tenant has the Microsoft admin consent workflow enabled. A Power Platform Administrator requests consent in Rencore Governance, a registered reviewer approves the application in Microsoft Entra ID, and then the administrator completes the consent in an incognito browser. After approval, the Power Platform scan automatically starts.

Give Rencore Governance consent for Power Platform when your tenant has the Microsoft admin consent workflow turned on. The process has three parts: request admin consent in Rencore Governance, approve the application in Microsoft Entra ID, then complete the consent.

Before you begin

  • Your Rencore Governance role needs the Manage consent permission. The Admin and Owner roles have it. See Rencore roles.
  • You need a Power Platform Administrator to sign in during the consent, and a registered reviewer of the admin consent workflow in Microsoft Entra ID to approve the application.
  • Power Platform is part of the Apps, Automation & BI module, on the Premium and Enterprise plans.

Steps

This part is done in Rencore Governance.

  1. Go to Settings > Workspace Settings > Environments.

  2. Next to the Environment, click the ellipses menu ([…]) and select Manage consent. You can also go to Settings > Environment Settings, click the ellipses menu ([…]) on General Settings and select Manage consent.

    Requesting Admin Consent

  3. Next to the service, click Ask admin for consent.

  4. In the dialog, copy the Consent URL and give it to your administrator, or click Send link as mail.

    On the dialog that opens, copy the “Consent URL” and provide this to your Administrator or click “Send link as mail”

  5. The administrator pastes the URL in an “Incognito” browser window.

  6. Click Give delegated consent.

    Click “Give delegated consent”

  7. Sign in with a Power Platform Administrator.

  8. In the dialog, enter a justification for the permission (e.g. This app consent is necessary to run the Governance Tool: Rencore Governance).

    Microsoft Approval required dialog with the justification field highlighted

  9. Click Request approval. A dialog confirms that your admin has been notified of your request to access this app. Once your admin reviews the request, you will be notified by email.

Approve the application

This part is done in the Microsoft Entra ID admin portal by a registered reviewer of the admin consent workflow.

  1. Go to https://entra.microsoft.com/.

  2. Go to Enterprise applications > Admin consent requests.

    Entra ID Activity menu with Admin consent requests highlighted

  3. Click the application Rencore Governance for Power Platform.

    Approving the Application

  4. In the Details dialog, click Review permissions and consent.

  5. Sign in with the admin user.

  6. Review the permissions and click Accept. A notification confirms the app has been approved.

  1. After the registered reviewer of the admin consent workflow confirms the app has been approved, the Power Platform Administrator opens the Consent URL again in an incognito browser window.

  2. Microsoft knows the app has been allowed on the tenant. Click Grant consent.

    Power Platform consent page of Rencore Governance with Give Consent highlighted

  3. Click Give delegated consent and sign in with the same Power Platform Administrator used in the first part.

    Information dialog on delegated permissions with Give delegated consent highlighted

  4. When the consent is complete, a confirmation dialog appears. Close the incognito browser.

    Power Platform consent page showing the consent was given

What you see

Return to Rencore Governance. The Power Platform scan is scheduled to start.

Frequently asked questions

Which Rencore Governance role do I need to manage consent for Power Platform?

Your Rencore Governance role needs the Manage consent permission. The Admin and Owner roles have it.

Who has to be involved when the admin consent workflow is turned on?

You need a Power Platform Administrator to sign in during the consent. You also need a registered reviewer of the admin consent workflow in Microsoft Entra ID to approve the application.

Where do I start the admin consent request for Power Platform in Rencore Governance?

Go to Settings > Workspace Settings > Environments, click the ellipses menu next to the Environment, and select Manage consent. Then click Ask admin for consent next to the service and copy the Consent URL or click Send link as mail.

Where does the reviewer approve the Rencore Governance for Power Platform application?

The reviewer goes to https://entra.microsoft.com/, opens Enterprise applications > Admin consent requests, and clicks the application Rencore Governance for Power Platform. Then the reviewer clicks Review permissions and consent, signs in, and clicks Accept.

What do I do after the Microsoft Entra ID reviewer approves the application?

The Power Platform Administrator opens the Consent URL again in an incognito browser window and clicks Grant consent. Then the administrator clicks Give delegated consent and signs in with the same account used in the first part. After the confirmation dialog appears, the Power Platform scan is scheduled to start.

Related pages

Related pages