Skip to main content

Allow EntraID users to sign in and use FreeBusy

Team avatar
Written by Team
Updated over a week ago

Are users in your Entra ID tenant reporting this prompt when trying to sign into FreeBusy?

In July 2025 Microsoft made a change to Entra ID that makes forces IT admins to create a permissions policy so users can sign in and use FreeBusy.

Specifically, to allow Entra ID users to use any 3rd party webapps like FreeBusy (in Entra ID terminology known as "multi-tenant Enterprise Apps") you have only these two choices (see screenshot):

1) Allow user consent for apps from verified publishers for selected permissions

2) Let Microsoft manage your consent settings

However, by default neither of these policies include permissions that are required by FreeBusy which are:

API

Claim

Type

Microsoft Graph

Calendars.ReadWrite.Shared

Delegated

Microsoft Graph

email

Delegated

Microsoft Graph

offline_access

Delegated

Microsoft Graph

openid

Delegated

Microsoft Graph

profile

Delegated

Microsoft Graph

User.Read

Delegated

Solution:

1) Ensure that you have enabled "Admin consent requests". This enables a workflow where users can raise access requests that will be routed to approvers you designate

2) Decide whether you want to approve each individual user request for FreeBusy or create a policy that allows anyone in the org to use FreeBusy. To approve requests one by one it's enough to add reviewers to the "Admin consent settings" screen.

3) To create a policy that allows anyone in the org to use FreeBusy, add the permissions requested by FreeBusy to the "Low Impact"

and choose "Allow user consent for apps from verified publishers for selected permissions"

More information at

Did this answer your question?