Symptoms
Error while setting up and authenticating a Prepare instance in Fabric Lakehouse. Error Message received:
Error: Need admin approval. Needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it.
Cause
The error occurs because TimeXtender triggers a request to allow their app registration to act on behalf of a non-MFA user. This is needed so that the app registration can be used to log in without interactive login prompts every time. This process is called permission delegation and gives the app registration the same permissions that the non-MFA user has within the Fabric scope. If permission delegation by user consent is not allowed within the Entra tenant or for that specific non-MFA user, admin consent is required.
Resolution
To resolve this issue, follow these steps:
- Ensure that permission delegation by user consent is allowed within your Entra tenant or for the specific non-MFA user.
- If user consent is not allowed, an admin must approve that the app registration can act on behalf of the non-MFA user.
Reference Ticket
33292