AADSTS65001: consent not granted for the application
Neither the user nor an administrator has consented to the application using the permissions it asked for.
From Microsoft's documentation, checked 9 Nov 2026.
AADSTS65001: DelegationDoesNotExist - The user or administrator hasn't consented to use the application with ID X.Also searched as: DelegationDoesNotExist · consent required
What it means
The app requested permissions that haven't been consented to for this user. Microsoft's reference says to send an interactive authorization request for the user and resource so consent can be given. Where users can't consent, an administrator can grant tenant-wide admin consent to the application.
Common causes
- No user or admin consent exists for the application and the permissions it requests.
How to fix it
Find the failing sign-in
In the Microsoft Entra admin center, go to Entra ID > Monitoring & health > Sign-in logs and filter by user, date and correlation ID. Or query the logs with Microsoft Graph PowerShell (needs AuditLog.Read.All); Microsoft recommends a time range so the request doesn't time out.
$since = (Get-Date).ToUniversalTime().AddDays(-7).ToString("yyyy-MM-ddTHH:mm:ssZ")
Get-MgAuditLogSignIn -Filter "status/errorCode eq 65001 and createdDateTime ge $since" -Top 10Send an interactive request
Have the app send an interactive authorization request for this user and resource so the consent prompt can appear.
Grant admin consent
An administrator authorised to consent for the organisation opens Enterprise applications, selects the app, then Security > Permissions, reviews the permissions and selects Grant admin consent.
How to confirm it's fixed
- The app's Permissions page lists the granted permissions and the user's next sign-in succeeds.
Related notes
Granting tenant-wide admin consent may revoke permissions already granted tenant-wide for that application. Permissions users granted for themselves aren't affected.
Related engineering templates
Follow Microsoft Entra ID failures and fixes
A short email about twice a week with new runbooks, configuration traps and fixes from KBY Technologies.