Community logon requires admin approval

[Nduss]

I ran into the following message when trying to register for the Power platform Community with my company Office 365 E3 account. Of course I contacted our in-house ICT  department however they couldn't figure out how to grant me access.

Now I'm not sure if I'm in the right place for assistance, only if someone could answer this or guide me to the right place this would be highly appreciated.

Thanks!
Niels

[v-yutliu-msft · Accepted solution]

Hi @Nduss ,

The reason why you met this problem is that only members of the Azure AD tenant Global administrator role could use Power platform Community.

So you need to have this role.

You should ask your tenant Global administrator assign you this role here:

https://aad.portal.azure.com/

Then, choose this:

Search your username here:

Give you this permission here:

 Then, you could use power platform.

Best regards,

[romankorchak1]

And who`s idea it was?? 
How many developers gona have global admin rights? And how likely they to get global admin rights if they ask (just to be able to log in to support forum) ? 

[Anonymous]

I had the same issue and fully agree. Very few people in an organisation have global admin rights, but plenty will need support for developing with Power Platform. MS should eliminate this barrier.

The only way I am actually able to post this right now is because I have a personal MS business account. However, the support questions I had were related to my university work. I also couldn't find any other way of contacting MS support (e.g. an email address).

Ironically, this topic probably won't see many likes since the people who need support access can't login to vote!!

[SDADM]

Just adding to the chorus here.  I should not be the only account in my org that can post, or upvote other posts.

[edcarden]

Kudos to all so far who have said this is effectively an absurd requirement. A user need not be of the admin role just to be able to post a question in a help/user forum.  This is one of the worst decisions I've seen with regards to Microsoft powerapps push. This is actively discouraging use of power automate.  Unbelievable, just unbelievable. 

[Rik_Bha]

Totally agree, my company was fine to grant me an access but not everyone's will. This is the most absurd requirement of Microsoft. Whats the point of giving access to a car with a key but not training or support from peers.

[andy-clapham]

I'd like to point out the proposed solution from v-yutliu-msft is a complete red herring!

A sensible MS365 admin will have set permissions up so that regular non-admin users cannot consent for any old app to read their azure details willy-nilly.

The solution is not to make regular users admin users, that's absurd indeed!

The solution is for the admin to review the app and consent on behalf of their organization for to use the permissions it needs (in this case read your basic account details).

The community account support page has instructions for your admin on how do do that:

https://powerusers.microsoft.com/t5/Community-Accounts-Registration/Community-Account-Support/ta-p/4...

And just to repost here:

The following steps can be used as a reference by the tenant admin if needed (screen UI may vary).

1. Request your tenant admin to login into the Azure portal
2. Select "Azure Active Directory" --> "Enterprise Applications"
3. Search for "Power platform Community" and select it.
4. Select Security -> Permissions --> User Consent
5. Click 'Grant Admin consent for <tenant name>'
6. Admin will be prompted to verify the login and give consent. After providing consent, the tenant Admin will be redirected to the Community (Please take the screenshot and share it with us).

Now, you can sign in to the community from your browser.

I really wish this consent required form had a "Please send an email to my admins asking them to do this" option, as people tend not to know what to ask, or even who their admin is.

Cheers.