Fix Sync 365 Consent Error - Admin Not Granted Consent

Consent Error – Administrator Has Not Granted Consent

Error: The user or administrator has not consented to use the application

This error occurs when the Sync 365 app hasn’t been granted proper consent within the customer tenant — either because the app was deleted, GDAP permissions are misconfigured, or the Partner Center account does not have the required Partner Center role.


Cause: The Sync 365 License application needs Application Administrator rights to be granted via GDAP. The Partner Center account used for consent must also have Assists your customers as: Admin Agent in Partner Center.

Important: Sales Agent and Helpdesk Agent are not enough for the Partner Center application consent process. Even if the account has GDAP Application Administrator, Partner Center can still return a 403 Forbidden error if the account is not set as an Admin Agent.

Free GDAP tool: If you need to create or repair a GDAP relationship, you can use the free Sync 365 GDAP Builder. You can also follow the Sync 365 GDAP Builder guide.

Resolution

  1. Check the Partner Center account role:
    • Go to Partner Center → Account settings → User management
    • Open the delegated admin account used by Sync 365
    • Set Assists your customers as to Admin Agent
    • Do not use Sales Agent or Helpdesk Agent for this consent account
  2. Check the GDAP relationship:
    • Ensure the assigned GDAP security group has the Application Administrator role
    • Ensure the account also has any other required read permissions, such as Global Reader
    • Make sure your Sync 365 delegated admin account is part of that GDAP group
  3. Sync 365 will attempt to auto-consent the app once daily or when you click Refresh license counts on the customer’s company page
  4. If the issue persists, re-grant Partner Center consent manually:
    • Go to Company → Delegated admin in Sync 365
    • Click Add → Grant Partner Center Consent

Why this happens

The Partner Center application consent API checks the Partner Center role before it applies the GDAP permission in the customer tenant. This means the account needs both:

  • Partner Center: Assists your customers as Admin Agent
  • GDAP: Application Administrator for the customer tenant

If the account only has Sales Agent or Helpdesk Agent, the request may fail with 403 Forbidden even though the GDAP role looks correct.

If this doesn’t resolve the issue, contact support@sync365.app