What causes DF-MICROSOFT365-CONSENTPENDING?

The target Microsoft 365 tenant administrator has not approved the data access request for this ADF application. The admin consent approval was revoked after the pipeline was initially set up. The ADF linked service is configured for a different Azure AD tenant than the one being accessed. The Microsoft Graph API permissions required by the connector have not been granted admin consent in the target tenant

How do I fix DF-MICROSOFT365-CONSENTPENDING?

In the Azure portal, go to Azure Active Directory > Enterprise applications and locate the ADF app registration used by the M365 linked service.. Under 'Permissions', check whether 'Grant admin consent for [tenant]' has been applied — if not, click the button (requires Global Administrator or Privileged Role Administrator).. If the consent request was initiated via ADF, the target tenant admin receives an email notification — confirm they approved it in the Microsoft 365 admin center.. Verify the ADF linked service is configured for the correct Azure AD tenant ID where the Microsoft 365 data lives.. After consent is granted, wait a few minutes for the permission to propagate, then re-run the pipeline.

Medium severitydata flow

Power BI Refresh Error:
DF-MICROSOFT365-CONSENTPENDING

What does this error mean?

The ADF Microsoft 365 connector accesses Microsoft 365 data (mail, calendar, contacts) via Microsoft Graph and requires explicit admin consent in the Azure AD tenant where the data resides.

Common causes

1The target Microsoft 365 tenant administrator has not approved the data access request for this ADF application
2The admin consent approval was revoked after the pipeline was initially set up
3The ADF linked service is configured for a different Azure AD tenant than the one being accessed
4The Microsoft Graph API permissions required by the connector have not been granted admin consent in the target tenant

How to fix it

1In the Azure portal, go to Azure Active Directory > Enterprise applications and locate the ADF app registration used by the M365 linked service.
2Under 'Permissions', check whether 'Grant admin consent for [tenant]' has been applied — if not, click the button (requires Global Administrator or Privileged Role Administrator).
3If the consent request was initiated via ADF, the target tenant admin receives an email notification — confirm they approved it in the Microsoft 365 admin center.
4Verify the ADF linked service is configured for the correct Azure AD tenant ID where the Microsoft 365 data lives.
5After consent is granted, wait a few minutes for the permission to propagate, then re-run the pipeline.

Frequently asked questions

Who needs to grant consent — the ADF subscription admin or the Microsoft 365 tenant admin?

The Microsoft 365 tenant administrator of the organization whose data is accessed — not the Azure subscription owner, but the Azure AD Global Administrator or Privileged Role Administrator for the target M365 tenant.

How does the admin grant consent?

The admin can approve via the Azure portal (Azure AD > Enterprise applications > [ADF app] > Permissions > Grant admin consent) or via the Microsoft 365 admin center if they received an approval request email.

Can this error appear if I'm accessing my own organization's Microsoft 365 data?

Yes — admin consent is required for the Microsoft Graph permissions used by the M365 connector, even within the same tenant. The data engineer cannot grant this themselves — only an admin role can.

Once consent is granted, will the pipeline run automatically or do I need to trigger it?

Trigger the pipeline manually or wait for the next scheduled run. ADF does not automatically retry after consent is granted. Allow a few minutes for the permission to propagate across Azure AD.

Official documentation: https://learn.microsoft.com/en-us/azure/data-factory/data-flow-troubleshoot-guide