---
title: "App Permissions & Consents in Microsoft 365 (M365)"
type: "wiki"
space: "IT Security"
author: "Giuseppe Aloisi"
created: 2024-07-15T19:19:18Z
updated: 2024-07-15T19:21:45Z
url: "https://students.senecapolytechnic.ca/spaces/185/it-security/wiki/view/14290/app-permissions-consents-in-microsoft-365-m365"
---

# App Permissions & Consents in Microsoft 365 (M365)

Third-party services offer Single Sign-On \(SSO\) which allows the use of Seneca credentials to authenticate their applications. However, this can pose a security and privacy risk if the applications are not vetted carefully.

The M365 Preapproved Apps Policy at Seneca Polytechnic is designed to ensure the security and integrity of our digital environment by allowing only Seneca-approved applications that are considered low-risk to accept Seneca credentials for authentication

![An Admin's Guide to Review App Permissions & Consents in Microsoft 365](https://blog.admindroid.com/wp-content/uploads/2022/10/permission-requested-1.png) *\*\*image above shows a prompt required for o365 SSO applications' required permissions with an accept or cancel button.*

# Policy Overview: 

## 1. Preapproved Apps: 

- Only applications [approved by Seneca IT](https://students.senecapolytechnic.ca/spaces/185/it-security/wiki/view/14291/preapproved-o365-apps) are allowed within the M365 environment. These applications are considered low-risk and have undergone thorough security assessments.
- Users are encouraged to explore [preapproved apps](https://students.senecapolytechnic.ca/spaces/185/it-security/wiki/view/14291/preapproved-o365-apps) available to enhance their productivity and user experience.
- These applications will not require users to accept further privacy agreements or grant permissions.

## 2. Apps requiring approval: 

    - Any application prompting for approval must go through a review process.
    - Users attempting to install these apps and authenticate using Seneca credentials will be notified to contact Seneca Polytechnic IT for a security and compliance review

![Application needs permission to access resources in your organization that  only an admin can grant. Please ask an admin to grant permission to this  app before you can use it. - Microsoft](https://learn-attachment.microsoft.com/api/attachments/10260-error.png?platform=QnA)

\*\* The image above shows a prompt for the user to reach out to IT administration for application approval.

## 3. App review and approval process: 

- Users seeking to use an app not preapproved by Seneca must contact IT support for assistance.
- Contact itsapp.approval@senecapolytechnic.ca with your application request and valid business case for the application
- The IT approval team will conduct a comprehensive review of the requested application, considering factors such as security, data privacy, and compatibility with Seneca systems.
- Approvals may take up to 5 business days \(excluding holidays\) to review

## 4. Approval Process: 

- Upon receiving a request, IT support will evaluate the proposed application.
- The review process will include an assessment of the application's security features, compliance with Seneca's policies, and potential impact on the IT infrastructure.
- Users will be informed of the approval or denial of their application request.
- Please note that a user can always authenticate against any third-party applications using credentials not associated with Seneca

## 5. Educational Outreach: 

- Seneca Polytechnic IT will provide educational resources to help users understand the importance of using preapproved apps and the potential risks associated with unauthorized applications.
- Training sessions and workshops may be organized to keep the Seneca community informed about the latest cyber security threats and best practices.