1. Introduction
2. Configure User Consent Settings
3. Check for any pending Admin consent requests
4. Check Conditional Access Policies
5. Disabling Two-Factor Authentication
6. Checking OneDrive Provisioning
7. Clearing Cookies
8. Check cloudHQ Installation (not admin)
9. Check cloudHQ Installation (admin)
10. Allowing Third-Party Apps (admin)

1. Introduction
   The most common cause of authorization problems is incorrect user consent settings for our application. Normally, Microsoft shows a prompt like: “Please ask your admin to grant access to this application.” In rare cases, this prompt may not appear or may not be reported correctly.

   Other possible causes:

   • The cloudHQ app is blocked because the admin only allows whitelisted apps.
   • OneDrive is not provisioned for the user.
   • Browser cookies are causing issues.

Here are the steps for how to troubleshoot Microsoft 365 OneDrive and SharePoint authorization errors:

2. Configure User Consent Options
   If users cannot give consent to the Microsoft 365 app by cloudHQ, it might be turned off.
   To fix this, do the following:
   1. Log into the Microsoft Entra admin center as a Privileged Role Administrator.
   2. Go to Identity > Applications > Enterprise applications > Consent and permissions > User consent settings.
   3. In User consent for applications, choose Allow user consent for apps
      

   More details can be found here: in the support note Configure how users consent to applications.

   If full access isn’t feasible, then admins should let users request admin approval by enabling the option Users can request admin consent to apps they are unable to consent to​
   :
   

During authorization the authorization the user will be prompted to request admin for approval. The admin will receive the request, and then can whitelist the application by going here: https://go.microsoft.com/fwlink/?linkid=2101016 (the full link is here: https://portal.azure.com/#view/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/~/AccessRequests/menuId/):



After the approval is granted by the admin, the end user authorizing the cloudHQ needs to the following:
After the admin approves, the user needs to do these steps for cloudHQ authorization:

1. Wait 10 to 15 minutes to make sure changes are spread to all Microsoft 365 instances
2. Delete all cookies (this is because previous request might be cached)
3. Sign in to Microsoft 365 with the correct account
4. Attempt authorization again
3. Check for any pending Admin consent requests

   It might that application is authorized by end user, by admin still needs to approve it.
   So admin needs to do the following:

   • In the Azure portal, select Enterprise applications.
     
   • Check if there are any pending applications that need to be authorized:
     

   The above steps will ensure that all Admin consent requests are approved.

   1. Wait 10 to 15 minutes to make sure changes are spread to all Microsoft 365 instances
   2. Delete all cookies (this is because previous request might be cached)
   3. Sign in to Microsoft 365 with the correct account
   4. Attempt authorization again
4. Check Conditional Access Policies
   Certain Conditional Access Policies will block all 3rd-party application and can interfere with the authentication process. If any Conditional Access is set up for your account, consider disabling these policies temporarily to see if that resolves the issue.

   Instructions for updating Conditional Access Policies to allow 3rd-party apps like cloudHQ can be found in the support note Conditional Access: Conditions.

5. Disabling Two-Factor Authentication: One of the most common problems with Office SharePoint or OneDrive is that users have two-factor authentication enabled and authorization flow is not properly configured (or prohibited) by Conditional Access policy. That might cause the authorization process to fail. The workaround is to disable temporary two-factor authentication and try again:
   1. Go to the Microsoft 365 admin console and disable two-factor authentication
   2. Go back to cloudHQ and retry the authorization
   3. Go to the Microsoft 365 admin console and enable two-factor authentication
6. Checking OneDrive Provisioning: It could be that your OneDrive account or SharePoint is not fully provisioned. Check that your OneDrive Business account is fully provisioned. Go to https://portal.office.com/onedrive to verify that your OneDrive is fully provisioned.
7. Clearing Cookies: It could be that you are logged into two different OneDrive Business accounts. Delete all cookies, then log into cloudHQ and try again.
8. Check CloudHQ Installation (not admin): If you are not admin, it might be that your cloudHQ installation is disabled. To check, uninstall cloudHQ from Microsoft 365, then try to authorize again:
   • Go to the My Apps section of the Microsoft 365panel. A direct link should be https://myapplications.microsoft.com/.
   • Remove all cloudHQ applications.
     

     

     

   • Delete all cookies.
   • Sign in again to Microsoft 365 and cloudHQ in a fresh browser session.
   • Try to authorize OneDrive Business or SharePoint again.
9. Check cloudHQ Installation (admin): If you are admin, it might be that your cloudHQ installation is disabled. To check, uninstall cloudHQ from Microsoft 365, then try to authorize again:
   • Select Azure Active Directory > Enterprise applications.
   • Find cloudHQ application and remove them
10. Allowing Third-Party Apps (admin): The problem could be that Microsoft 365 is configured not to allow 3rd-party applications to be installed. To check that, your Microsoft 365 admin needs to do the following:
    • Select Azure Active Directory > Enterprise applications > Consent and permissions > User consent settings.
    • Under User consent for applications, select Allow user consent for apps
    • Select Save to save your settings.
      

For further reference, please visit Application Access in Microsoft Azure.