How to grant API Permissions to other App as owner of the target API

Question

Hey,

in the docs it mentions at the end of Types of permissions that you should be able to consent to permissions for apps that you own: "In general, only an administrator or owner of an API's service principal can consent to application permissions exposed by that API.".

Which from a workflow perspective definetely makes sense. As an owner of an API I should be able to allow people to use it.

User's image

But the admin consent button is rightfully disabled (since I'm not an admin) and there doesn't seem to be any other option to do that. Are the docs wrong here or is the option hidden somewhere or maybe only usable with the graph api or similar? I can't seem to find it mentioned anywhere.

Thanks in advance,

Jannes

Answer

@Jannes

Thank you for posting this in Microsoft Q&A.

As I understand the option to grant admin consent is greyed out when you try to add permission for exposed API.

As per the document that you have share it is mentioned that only an administrator or owner of an API's service principal can consent to application permissions exposed by that API.

When you expose an API and register it in App registration, there is a service principal that is created under Enterprise application blade in Entra ID.

You will have to add yourself as owner of service principal that is created for API.

You can follow below article to add yourself as owner of service principal.

https://zcusa.951200.xyz/en-us/entra/identity/enterprise-apps/assign-app-owners?pivots=portal

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Share via

How to grant API Permissions to other App as owner of the target API

1 answer

Your answer