# AADSTS65001: The user or administrator has not consented to use the application

**Code:** `AADSTS65001` · **Category:** Azure · **Seen on:** Azure

The app needs permissions that haven’t been granted for this user or tenant.

## Meaning

Delegated permissions need user or admin consent; many Microsoft Graph permissions need admin consent. Non-interactive flows (client credentials, on-behalf-of, ROPC) can’t show a consent prompt, so they fail with 65001.

## Common causes

- Required permission not consented
- Admin consent required but only user consent attempted
- User consent disabled by tenant policy
- New permission added to the app without re-consent

## Quick fix

1. Grant admin consent in App registrations → API permissions
2. Trigger interactive consent with prompt=consent
3. Ask an admin to approve via the admin consent URL

## Detailed fix by platform

### Azure CLI

1. `az ad app permission admin-consent --id <app-id>`

## How to diagnose

1. **Permissions** — API permissions list and status
2. **Policy** — User consent settings
3. **Flow** — Interactive or not?

---
Source: [WhatIsMyError](https://whatismyerror.com/errors/azure/aadsts65001-consent-required)