How to grant admin consent to Azure APIs and connect to the Microsoft Graph API

Published: August 12, 2022

Applies to: Cayosoft Administrator 9.x or later

Summary

Cayosoft primarily uses the Microsoft Graph API to collect Audit, License Usage, and other analytical data. In order to access Microsoft Graph, the Microsoft 365 connection account must be granted Administrative Consent.

The full list of permissions for the grant with the detailed description you can find here: Azure AD application permissions required by Cayosoft Administrator Service. 

Grant the Service Account Administrative Consent to the Microsoft Graph API

1. Open the Cayosoft Console
2. Navigate to Microsoft 365 Extension
3. In Admin Consent click Grant Consent
4. When prompted to sign on, enter the Microsoft 365 connection account Username and password.
5. After the account is authorized, the browser will redirect to the Cayosoft confirmation page.
   
   Important: Do not select the checkbox 'Consent on behalf of your organization ' when accepting permissions. 
6. Close the browser window and return to the Cayosoft Console.
7. Click the Refresh button
8. If the Consent Granted field changes to YES, then admin Consent was successfully granted otherwise repeat steps 1 through 7

Verify the Usage Analytics Collection Rule is set to collect from Graph

1. Open the Cayosoft Console
2. Navigate to: Home > Rules > Built-in Rules (Pre-configured) > Analytics collection | Microsoft 365 Usage
3. Verify the option Use Microsoft Graph API for data collection: is set to YES
4. If the option is set to No, then change the setting then click Save Changes.

Related Articles

KB20180823-1 Troubleshooting Cayosoft Administrator Grant Consent

KB20131202-1 Required components to work with Azure AD and Office 365 Services: Exchange Online, SharePoint Online, Skype for Business Online

KB20180503-1 Troubleshooting connection to Office 365