A clerk tries to sign into a new inventory app that requests Directory.ReadWrite.All, but no usable consent prompt appears for that clerk. What is the most likely consent requirement?
Select an answer to reveal the explanation.
Short Explanation
Directory.ReadWrite.All is the “rewrite the phone book” permission—clerks do not get to approve that. An admin has to consent; waiting for a normal user prompt is waiting for a door that will not open.
Full Explanation
High-privilege delegated permissions and all application permissions require admin consent in Microsoft Entra ID. Directory.ReadWrite.All falls into that high-privilege category, so end-user consent will not complete the grant. Entitlement Management packages are not the default prerequisite for Graph admin consent. Making the permission an application permission increases, rather than decreases, the need for admin consent.