Tenant is not allowing authentication

[LesSpangler]

Publish works perfectly up to authentication.
I then get a message indicating:
User "Needs admin approval"
unverified
needs permission to access resources in your organization that only an admin can grant.

Ideas where in the tenant this would be set.. The username I am using has full "Intune Administrator" rights in the tenant.

[svrooij]

You global administrator can configure who can grant access to new applications. There is also an option that users (like you) can request access to an app.

Admin consent for 1 user

Microsoft published a document on how to grant access to an application for a single user, check this documentation page

But it needs some changes:

• $clientAppId must be d5a8a406-3b1d-4069-91cc-d76acdd812fe
• $userUpnOrId must be your account
• $permissions needs to have these added ,"DeviceManagementConfiguration.ReadWrite.All", "DeviceManagementApps.ReadWrite.All"

The script will create a service principal if required and will assign the app to you.

Admin consent:

1. Global admin should consent to WinTuner by @svrooij consent link
2. (optional) Go to Enterprise applications and switch this application to requires User assignment
3. Under Enterprise applications assign the application to your account

Own app registration

Or if you don't want to use my app registration for some reason, you can ask someone with the right access to create a new app registration and assign that. Then you just have to add the client id to each command.

When configuring the new application be sure to set in as native application with these redirect urls: