I am trying to grant workflows permissions to user profiles, in order to use User Profiles properties in SharePoint Designer workflows 2013 mode. I am following the steps here: https://www.c-sharpcorner.com/article/get-user-profile-properties-data-in-sharepoint-designer-2013-workflow/

But when I am trying to grand the permissions I get this message: "Your tenant administrator has to approve this app."

enter image description here

I am in the farm admins group, and I modified the user profile service application permissions to add my account to have full control.

Any idea?


  • are you using the windows authentications or ADFS?
    – Waqas Sarwar MVP
    Apr 15, 2019 at 20:46
  • I am using windows authentication.
    – Dan
    Apr 15, 2019 at 20:53
  • have you tried to login with actual farm admin account (which run the SharePoint timer service)? we had issue in past and we use the actual farm admin account.
    – Waqas Sarwar MVP
    Apr 15, 2019 at 21:09
  • Farm account (System account) cannot grant permissions for apps, it's a security limitation in SharePoint server, it has to be a service account assigned as farm admin and local admin.
    – Dan
    Apr 15, 2019 at 21:48

2 Answers 2


I'm using On-Premise SharePoint 2019 and got the same error when adding an app.

The issue got solved by using Central Administration URL with suffix _layouts/15/appinv.aspx, so in my case this syntax works http://HOSTNAME:PORT/_layouts/15/appinv.aspx.

With SharePoint Online one could use -admin suffix in the first part of hostname, like https://[mytenant]-admin.sharepoint.com/_layouts/15/appinv.aspx. It's used instead of https://[mytenant].sharepoint.com/_layouts/15/appinv.aspx.


The procedure must be completed by a user that has Site Owner permissions.

You could refer to this article for more:


  • I am already a site collection admin of the site and already exist in the site owners group.
    – Dan
    Apr 16, 2019 at 1:55
  • Have you tried to do this with another user account with site owners permissions? Apr 16, 2019 at 7:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.