Low severityauthentication
Power BI Error:
AADSTS65004
What does this error mean?
The user clicked Cancel on the consent prompt instead of granting the permissions the app requested.
Common causes
- 1The user clicked Cancel/No on the Entra ID consent dialog instead of Accept
- 2The app requests permissions (scopes) that the user is unwilling or unsure to approve
- 3User assignment required is enabled but the user expected a smoother flow and bailed out
- 4Tenant policy disables user consent, so the user sees a 'needs admin approval' dialog and cancels
- 5The app requests admin-only permissions (e.g. application permissions or high-privilege Graph scopes) that a regular user cannot grant
How to fix it
- 1Have the user retry the sign-in and click Accept on the consent screen — this resolves it in the majority of cases
- 2Review the requested scopes in the app registration (Entra ID > App registrations > API permissions) and remove permissions the app does not actually need
- 3If the app is broadly used, have a Global Administrator grant tenant-wide admin consent via 'Grant admin consent for <tenant>' so individual users no longer see the prompt
- 4Check Entra ID > Enterprise applications > Consent and permissions: if user consent is disabled, either enable it for verified publishers or route requests through the admin consent workflow
- 5For Power BI / Fabric / ADF service principal scenarios, ensure the SPN has admin-consented permissions (e.g. Power BI Service Tenant.Read.All) — user consent flows do not apply to unattended pipelines