How to Fix AADSTS65001: The user or administrator has not consented to use the application
Error message
AADSTS65001: The user or administrator has not consented to use the application with ID '<id>'.
If you're seeing "AADSTS65001: The user or administrator has not consented to use the application", you're not alone. Here's what it means, why it happens, and the steps to resolve it.
What this error means
Sign-in succeeded but the app cannot get a token because consent for its requested permissions has never been granted.
Why this happens
First-time sign-in for an app that needs admin consent, user consent disabled in tenant, or a recent permission change that re-triggers consent.
Step-by-step fix
An admin should grant consent in Entra → Enterprise applications → <app> → Permissions → Grant admin consent.
If user consent is allowed for the requested permissions, ask the user to sign in again and accept the consent prompt.
Verify the permissions list is accurate — remove unused scopes the app no longer needs.
Affected products
Entra ID
Still broken? Try these
- Check audit logs for a recent permission change that invalidated prior consent.
- Confirm the tenant's consent policies allow the requested permissions for users.
- If the app is multi-tenant, ensure consent is granted in the user's home tenant, not yours.
Related errors
Frequently asked questions
What does "AADSTS65001: The user or administrator has not consented to use the application" mean?
Sign-in succeeded but the app cannot get a token because consent for its requested permissions has never been granted.
What causes "AADSTS65001: The user or administrator has not consented to use the application"?
First-time sign-in for an app that needs admin consent, user consent disabled in tenant, or a recent permission change that re-triggers consent.
How do I fix "AADSTS65001: The user or administrator has not consented to use the application"?
1. An admin should grant consent in Entra → Enterprise applications → <app> → Permissions → Grant admin consent. 2. If user consent is allowed for the requested permissions, ask the user to sign in again and accept the consent prompt. 3. Verify the permissions list is accurate — remove unused scopes the app no longer needs. Always test changes in a non-production environment first.
Browse more errors in Entra ID: Fix Microsoft Entra ID (Azure AD) errors. AADSTS error codes, admin consent, app role assignment, Conditional Access, and user lookup problems. Or paste your own error into the error decoder tool to find a match. You can also go back to the homepage to browse common errors by topic.