I am trying to grant workflows permissions to user profiles, in order to use User Profiles properties in SharePoint Designer workflows 2013 mode. I am following the steps here: https://www.c-sharpcorner.com/article/get-user-profile-properties-data-in-sharepoint-designer-2013-workflow/

But when I am trying to grand the permissions I get this message: "Your tenant administrator has to approve this app."

enter image description here

I am in the farm admins group, and I modified the user profile service application permissions to add my account to have full control.

Any idea?


  • are you using the windows authentications or ADFS? – Waqas Sarwar MVP Apr 15 '19 at 20:46
  • I am using windows authentication. – Dan Apr 15 '19 at 20:53
  • have you tried to login with actual farm admin account (which run the SharePoint timer service)? we had issue in past and we use the actual farm admin account. – Waqas Sarwar MVP Apr 15 '19 at 21:09
  • Farm account (System account) cannot grant permissions for apps, it's a security limitation in SharePoint server, it has to be a service account assigned as farm admin and local admin. – Dan Apr 15 '19 at 21:48

The procedure must be completed by a user that has Site Owner permissions.

You could refer to this article for more:


  • I am already a site collection admin of the site and already exist in the site owners group. – Dan Apr 16 '19 at 1:55
  • Have you tried to do this with another user account with site owners permissions? – Michael Han_MSFT Apr 16 '19 at 7:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.