Office 365 Authentication – Admin Consent Requirement
The Admin Consent process is necessary to enable Office 365 authentication for LinkFixer Advanced. This step involves two key actions:
Application Registration and Authorization in Azure
The LinkFixer Advanced application must be registered and authorized in Azure AD/Entra ID to utilize modern authentication. This is essential for features such as Multi-Factor Authentication (MFA). Upon registration, the application is listed as an Enterprise App in Azure Active Directory (Entra ID).Global Admin Consent
During the registration process, a Global Administrator must consent on behalf of the organization. This is a one-time action that involves clicking the Admin Consent button and signing in. Please note that Global Administrator credentials are not stored at any point, nor are they used to process files in SharePoint Online. This step is solely for app registration purposes.
Permissions and Access Control
LinkFixer Advanced will be assigned the AllSites.FullControl claim, but this does not grant automatic full control over the entire SharePoint Online tenant. Instead, permissions are limited by two key factors:
- Site Collection Scope: LinkFixer Advanced only has access to the specific site collections added to "{☰} Main Menu | Network Locations"
- Site Collection Admin Privileges: Changes within a site collection can only be made if the authenticated O365 account(s) are designated Site Collection Administrators. Without this role, the application does not have inherent access to that site collection.
Additional Notes
- No modifications will occur to your sites or files unless appropriate SharePoint Online permissions are granted.
- The Global Admin account used during registration is not involved in site collection processes, nor does it grant unrestricted access to users within the software.
Admin Consent Steps:
- Go to {☰} Main Menu | Network Locations
- Hit the {Add} button at the top-left
- Select SharePoint
- Enter root SharePoint URL, and hit {Enter}
- Choose "Office 365 with admin consent" on the Authentication field
- Hit the {Admin Consent} button
- Follow standard Office 365 authentication procedure
- Upon completion, hit the {Sign In| button, using the Site Collection Administrator account
For questions or inquiries, please send a support ticket or email support@LinkTek.com.