Pending Admin Consent Requests
The question it answers: Which apps are waiting for an administrator to grant consent, and which permissions do they ask for?
Apps users asked an administrator to approve through the admin consent workflow, and the permissions each one requests. Every approval hands the app those permissions.
At a glance
Section titled “At a glance”| Where in the app | Entra ID › Security › App Consent Requests |
| Workload | Entra ID |
| Kind | Table |
| Data | Built from the tenant data IntensiveReports keeps in memory and refreshes in the background, so it opens at once. |
| Licence | No extra licence needed. |
| Report id (API and MCP) | entra.security.app-consent-requests |
Columns
Section titled “Columns”| Column | Key | Type |
|---|---|---|
| App | AppDisplayName | Text |
| Requested permissions | PendingScopesString | Text |
| Consent type | ConsentType | Text |
| App ID | AppId | Text |
What it needs
Section titled “What it needs”Licence: No extra licence needed.
Application permissions on the IntensiveReports app registration (all permissions):
| Permission | API | What it allows | Note |
|---|---|---|---|
ConsentRequest.Read.All | Microsoft Graph | Read all consent requests |
Data sources it reads
GET /v1.0/identityGovernance/appConsent/appConsentRequests
Through the API and MCP
Section titled “Through the API and MCP”GET /ir-api/v1/reports/entra.security.app-consent-requests?size=100An AI assistant reads it with the MCP tool get_report and the id entra.security.app-consent-requests. The client needs the Read grant for Entra ID. See Using the API.
Related reports
Section titled “Related reports”- App Consent Policy Posture - Can ordinary users consent to apps or invite guests, and which of these tenant-wide settings need action?