ComputerGuru — Tenant Admin Consent

Send the consent URL to each customer's Global Admin. After they accept, run onboard-tenant.sh <domain>.

One-click onboarding flow: Customer Global Admin clicks their consent link below → logs in → clicks Accept. Then run: bash scripts/onboard-tenant.sh <domain> — the script will automatically consent all other apps and assign all directory roles.

Re-consent (orange) means Tenant Admin was previously consented but needs a refresh to pick up AppRoleAssignment.ReadWrite.All.
—
Pending consent
—
Need re-consent
—
Done
Re-consent required
Pending initial consent