“Need admin approval” when connecting an app to Outlook: what it means and how to fix it

Updated October 21, 2026 · By the OnePane team

You click Connect in an app that works with Outlook, sign in with your work account, and Microsoft stops you with Need admin approval: the app “needs permission to access resources in your organization that only an admin can grant.” Nothing is broken. Your organization has decided that only administrators can approve apps that read company data. Here's what that means and how to get it sorted quickly.

Quick answer: only an administrator can fix this. If the screen offers a request form, fill it in with a short reason. Otherwise send your IT team the app's name, its application ID and what it asks for. For OnePane, everything they need is on one page: OnePane for IT admins.

Why you see it

Microsoft 365 lets each organization choose who can allow apps to read company data. Common settings:

• Users can't consent at all: every new app needs an admin. This is the default in many companies.
• Users can consent only to apps from verified publishers, and only for low-risk permissions. Reading mail usually isn't on that list.
• Admin consent requests are on: you'll see a form to ask for approval, and your admins get an email.

Personal Outlook.com and Hotmail accounts don't have this setting, which is why the same app often works with a personal account but not a work one.

What to do

If you see “Request approval”

1. Type a short reason, such as “Read-only view of my own inbox and calendar on my browser start page.”
2. Click Request approval. Your admins are notified and you get an email when they decide.
3. Try connecting again after approval.

If there's no request form

Send your IT team a message with:

• the app's name and website;
• its application (client) ID, shown on the error screen or in the app's documentation;
• the permissions it asks for, and whether they're read-only;
• where it stores data.

A request with those four things usually gets a quick answer, because it's what the admin has to check anyway.

For admins: how approval works

Approving an app once (“admin consent”) grants the listed permissions for everyone in the organization, and you can limit or remove it later in the Microsoft Entra admin center under Enterprise applications. Requests from users appear under Enterprise applications → Admin consent requests. Check that the permissions are delegated and read-only and that the publisher matches the app's website.

In the meantime

For calendars, you often don't need a connection at all. Outlook on the web can publish a calendar as a read-only link (Settings → Calendar → Shared calendars → Publish a calendar), which apps can read like any calendar subscription. Many organizations turn publishing off too; if the option is missing, wait for the approval. See how to see Outlook and Google calendars together.

Connecting OnePane to a work account

OnePane's Outlook widgets ask only for read-only access to your own inbox (Mail.Read) and calendar (Calendars.Read), each only when you add that widget. Nothing is sent or changed, mail isn't stored, and the connection token is encrypted and kept in Canada. Forward your IT team this page, or use the Calendar widget with a published calendar link while you wait.

Questions