I've created one web app and on that web app i want to give access to other tenant. But the consent for the app is not going to the Global administrator.

Hi @Chand, Ayush (MTSL) ,

Thanks for reaching out in Microsoft Q&A forum,

We understand that you have created an Azure Web App in one Microsoft Entra tenant and would like to provide access to users from another tenant. However, the admin consent request is not reaching the Global Administrator in the external tenant.

For a cross-tenant scenario, the application must first be configured as a multitenant application. Please verify the following configuration:

1. Go to Microsoft Entra ID > App registrations > your application > Authentication and confirm that Supported account types is set to: Accounts in any organizational directory (Multitenant)
2. Under API permissions, verify that the required permissions are configured correctly. Please also confirm whether the application is requesting Delegated or Application permissions, as the required administrator role can depend on the permission type.
3. In the external/customer tenant, the admin consent workflow must be enabled if you expect users to submit an approval request through the Request admin approval option. The request is sent to the reviewers configured in that tenant; it is not automatically guaranteed to be delivered specifically to the Global Administrator's email address.
4. The external tenant administrator can also bypass the approval-request workflow and grant tenant-wide consent directly using the following URL:

https://login.microsoftonline.com/<TARGET-TENANT-ID>/adminconsent?client_id=<CLIENT-ID>

Where:

• <TARGET-TENANT-ID> is the Microsoft Entra tenant ID of the external/customer tenant.
• <CLIENT-ID> is the Application (client) ID of your application.

After the external tenant administrator grants consent, an Enterprise Application/service principal for the application should be created in the external tenant. The administrator can then assign the required users or groups if access needs to be restricted.

If you would like to continue using the approval workflow instead, please ask the tenant administrator to verify:

• Users can request admin consent to apps they are unable to consent to is enabled.
• Appropriate reviewers are configured.
• The request is visible under Enterprise applications → Activity → Admin consent requests → My Pending.
• Email notifications for consent requests are enabled.
• The request has not expired.

Based on the current information, there is no indication of an Azure App Service platform issue. The behavior appears to be related to the Microsoft Entra application consent configuration in the external tenant.

As a next step, we recommend confirming the application's Supported account types, API permissions, and the external tenant's Admin consent workflow configuration. If possible, please also provide the exact error message/AADSTS error code received by the external user so that we can further narrow down the issue.

Official Microsoft documentation:

• Grant tenant-wide admin consent: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent
• Configure the admin consent workflow: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/configure-admin-consent-workflow
• Review admin consent requests: https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/review-admin-consent-requests
• Troubleshoot consent issues: https://learn.microsoft.com/en-us/troubleshoot/entra/entra-id/app-integration/troubleshoot-consent-issues

Kindly let us know if the above helps or you need further assistance on this issue.

Please do not forget to and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Welcome to Microsoft Q&A!

I hope you are doing well @Chand, Ayush (MTSL)

Granting admin consent in your own tenant does not automatically send a notification or consent prompt to admins of other tenants.

To enable access for the external tenant, follow these concise steps:

1. Enable Multi-Tenant: In your app's Authentication settings in Entra ID, ensure Supported account types is set to “Accounts in any organizational directory (Multitenant)”.
2. Send Direct Admin Consent URL (Recommended): Have the other tenant’s Global Admin open this link to review and grant tenant-wide consent:

HTTP

https://login.microsoftonline.com/common/adminconsent?client_id=<YOUR_APP_CLIENT_ID>

1. Check Admin Consent Workflow: If external users try to sign in and you want automated requests sent to their admin, the target tenant must enable the Admin consent workflow under Enterprise applications > Consent and permissions > Admin consent settings.

References:

• Grant tenant-wide admin consent to an application
• Configure the admin consent workflow in Microsoft Entra ID

Help make this community better for everyone: if this answer resolved your issue, please accept it or leave an upvote. If not, share more details in a comment so we can continue the discussion and find the right solution.