Administrator approval and consent for Web Connectors (Azure storage, Office 365 Sharepoint, Dynamics365 CRM, Onedrive, Outlook 365)

[Sonja_Bauernfeind]

Account Types 

• Personal Account:

Once the connector has authorization to access the Microsoft account there will be a corresponding entry in "My apps"
https://myapps.microsoft.com/

• Enterprise Account:

Granting Access for Enterprise Accounts:

Once the enterprise application is selected an application list will appear that the user can filter searching for Qlik Web Connector:

Select Qlik Web Connectors (Office 365 SharePoint) and look for the properties page. The page should have the following checkboxes ticked.
 

Enabled for users to sign-in? (Yes)

User assignment required? (Yes) This field is only mandatory if the administrator wants to restrict access to the users.

Visible to users? (Yes)
 
 

 

Testing (With administrator rights)

Open Qlik Office 365 SharePoint connector and select "Can Authenticate" and the press the green button "Authenticate"


You will be redirected to a Microsoft login page that should look similar to the following picture:
 

If azure grants access, the Qlik Webconnector application will generate a code as the following one:



Testing (With NON administrator rights)

If a basic (Non admin) user tries to auth the following message would appear in azure:

In order to fix this the administrator needs to grant access to the users.


Once the administrator granted access to the user the message that should appear is the following one:

[Ken_T]

it would be helpful, especially for SharePoint Files connections, if the exact minimum roles/permissions that a SP site admin would have to grant to a user for a specific SP site, so that the user would be able to create a connection to the site and be able to use the connection to load data from the files on the site.
https://learn.microsoft.com/en-us/sharepoint/sites/user-permissions-and-permission-levels

there are many different types of permissions, and it is not clearly documented anywhere from QLIK perspective, what is bare minimum permissions required, for a site where sensitive data is located and site admins are very careful about what permissions are granted to whom.

[Richard_Norris]

I created an Azure account and am a Qlik Cloud admin, but I am not an admin on our network. 

When I try to create a connection from Qlik to Azure, I get the administrator approval request window similar to the one posted here (but with a reason field). 

The IT team have said that they have approved access, but when I try and configure the connection, it still just does the same thing.

Since I don't have any control over the approval, it's really difficult for me to troubleshoot, and since the IT team don't know what Qlik is or how it operates, it's pretty hard for them to know what they're doing. 

I need to get on a call with them to sort it out, but before I do it would be great to have some idea of the sorts of reasons that this could be happening. Anyone have any ideas? 

Cheers!