Admin consent is organization-level approval for an application to receive permissions across an entire tenant. In identity platforms such as Microsoft Entra ID, it can authorize access to data or APIs on behalf of many users at once, instead of requiring each user to approve individually. This is useful for managed business apps, but it also makes consent a high-value control point.
From a security perspective, admin consent matters because broad permissions can outlive the original business need. Attackers may abuse social engineering or misleading app screens to persuade an administrator to approve dangerous scopes, then use the resulting access to read mail, files, or directory data. Defenders reduce this risk by restricting who can grant consent, reviewing approved apps, limiting high-risk scopes, and revoking unused or suspicious grants. Regular consent review helps prevent forgotten approvals from becoming a persistent back door.