I’m having trouble setting up sketchup for our Microsoft 365 environment. Non admin users can’t authenticate via microsoft login, they only get to the “need admin approval” window.
I clicked on the “grant admin consent” button, signed in using a 365 admin tenant account, then granted the permissions requested. This account seems to sign in with no issue. To be expected as a global admin account.
But our test student account doesn’t seem to work at all, it just reverts back to the “need admin approval” page, see below.
The only users out of the 3 i have tested that worked are admin related, anyone else gets the “need admin approval” message. This information is reflected in the permissions page as the only user in this “granted by” section is the global admin account.
After reading through some other posts here there was some talk of a “whitelist” to be allowed to use the service. Is this still in effect? I assume not as i can sign in with the global admin user but just wanted to check.
Any assistance with this would be greatly appreciated as I’m at the limit of my knowledge on the matter.
Thanks for the @ to get my attention on this thread. I’ll start off by running a few quick tests on my end and I’ll talk to our Microsoft expert as soon as she arrives to see if she has any additional insight. I’ll edit this post as soon as I am done running the tests and let you know if I can reproduce the bug you are seeing.
In the meantime can you open developer mode and send me a screenshot of the console tab when you see the error @Grazzite? I may be able to get more information from that to narrow down possible causes.
Thanks for the post @Grazzite, all the screenshots you shared were very helpful. Can you confirm that you have all five of the settings enabled in the admin console as shown here?
The default “permission requested” window that pops up when logging in as your tenant admin account with the “cloud application administrator” role does not seem to be requesting the correct permissions.
So we need some way of forcing Sketchup to present the correct permissions for the organisation, not just the one admin account. The only way i found to do this was to insert the missing permissions inside a url. Replace +yourtenantID+ with your tenant ID.
After this, also change the Set Assignment required = No in properties.
This then allowed a standard user to log in and use the web application. Can save to onedrive too with no issue.
I don’t know at this stage if this is something to do with how we have configured our tenant to cause this issue in the first place but happy to park the issue for now.
Hope this helps someone.
