219 votes25 comments · Microsoft Graph Feature Requests » Identity and Access · Flag idea as inappropriate… · Admin →
Work has started. We plan to build an experience where end users and administrators can pick a specific resource to grant consent to, such as a specific group or site. This will be programmable through Microsoft Graph API.Maarten Visser commented
The only way to stop Shadow IT (buying SaaS apps not landing in M365) is by having mechanisms for End Users (with no more then SP Site (Collection) Admin rights) to be able to install Apps from AppSource WITHOUT the need to go to Corporate IT. So no need for Tenent wide Consent, App Catalog approvals or other actions which require Azure AD or SharePoint Admin rights.
We need this! And any other option to have a smooth flow for onboarding customers (SPfx and Team Tab apps)Maarten Visser supported this idea ·