Admin Approval

If you’re seeing an error like “Needs admin approval” during sign-in, your organization’s security policies require an administrator to approve access to your ADO data through AgileViz. This is a one-time process.

There are two scenarios, your organization’s security configuration determines which scenario applies to you. Ask your admin or help desk if you’re unsure which applies. Most security-focused organizations are configured for Scenario 1.

If your organization has enabled the admin consent requests workflow in Entra ID as recommended by Microsoft, this is the path for you. It allows you to request approval directly from the sign-in error page.

  1. Attempt Sign-In: When you try to log in to AgileViz, you’ll see a Microsoft-hosted page indicating the app needs admin approval.
  2. Look for Request Approval: Look for a button to request approval, it might say “Request approval” or something similar. If you don’t see such a button, move on to Scenario 2 below.
  3. Submit Request: Click the button to request approval. Provide a brief justification, for example: “I need access to Azure DevOps analytics through AgileViz to get visibility into my team’s workflow performance.”
  4. Admin Review: Your request goes to designated reviewers. They’ll get an email or notification about your request.
  5. Approval: Once approved, the app is registered in your tenant, and you can sign in immediately. No further action needed.
  6. Retry: If approved, refresh the browser and sign in again.

In this case, you’ll need to work with your admin or help desk to get approval for AgileViz.

  1. Share Details with Admin: Provide your admin with the following information.
    • App Name: AgileViz
    • Client ID: b6c1193a-254d-49f4-b976-67c55cc058a7
    • Permissions/Scopes: https://analytics.dev.azure.com/.default (read-only access to Azure DevOps analytics)
    • Publisher: AgileViz.com
  2. Admin Grants Consent:
    • Sign in to the Azure Portal at portal.azure.com.
    • Go to Microsoft Entra ID > Enterprise applications.
    • Search for “AgileViz” or the Client ID provided above.
    • Select the app > Permissions > Grant admin consent….
    • Review and confirm.
  3. Post-Approval: Once granted, AgileViz is added to your tenant’s Enterprise applications list. Users can now sign in.
  4. Retry: Refresh the browser and login to AgileViz.

Admin Notes

  • This is tenant-wide consent. Once complete, all users in your org with access to ADO can use AgileViz without further approvals.
  • Verify permissions: AgileViz currently only requests vso.analytics access.
    • AgileViz may request additional access for future feature release, these will be requested incrememtally.
  • Security: AgileViz maintains a strict security posture, you can learn more on the Security page.

Still Stuck?

Feedback