This article explains why Microsoft shows the Need admin approval message for the VincereMailV3 app and how your Microsoft Entra admin can grant consent so users can successfully connect their mailbox.
⚠ Important: You must be a Microsoft Entra ID Global Administrator, or have another admin role that can grant consent to enterprise applications, to complete the admin steps in this article.
📌 Note: This approval is controlled by your organisation’s Microsoft security settings.
Many tenants prevent individual users from approving third-party apps that access mailbox and calendar data. Vincere email sync uses a trusted integration platform (Nylas) and needs a one-time admin approval for the VincereMailV3 app. Different Microsoft tenants are configured differently, so some customers will see this prompt and others will not.
Resolve Microsoft 'Need Admin Approval' Error When Connecting Email
1. Grant admin consent for VincereMailV3
Sign in to the Microsoft Entra admin center with an admin account.
In the left menu, click Entra ID, then click Enterprise applications.
Click All applications, then search for VincereMailV3 and open it.
Click Permissions, then click Grant admin consent for [your organisation].
Review the requested permissions, then click Accept.
📌 Note: If the Admin consent area looks empty before you click Grant admin consent, this usually means consent has not yet been granted.
Clicking Grant admin consent and then Accept is the correct action.
2. Enable the admin consent request workflow if the error continues
If consent has been granted but users still see the Need admin approval message, enable Microsoft’s admin consent request workflow so users can send a request that IT approves from a queue.
Sign in to the Microsoft Entra admin center as a Global Administrator, click Entra ID, then click Enterprise applications.
Click Consent and permissions, then click Admin consent settings.
Under Admin consent requests, set Users can request admin consent to apps they are unable to consent to to Yes.
Click Save.
📌 Note: It can take up to one hour for Microsoft to apply the admin consent request workflow settings.
3. User: reconnect email and submit the consent request
After the workflow is enabled:
Ask the user to try connecting their email again in Vincere.
When the Need admin approval page appears, the user should click Request admin consent.
If a justification box is shown, the user can enter a short message to the IT team, for example: Please approve Vincere email sync (VincereMailV3) so I can connect my mailbox. If justification is not required, the user can leave this box empty.
4. Admin: approve the consent request
In the Microsoft Entra admin center, go to the Admin consent requests area.
Click My pending.
Find the request for VincereMailV3, then click Approve.
5. Reconnect the mailbox in a private browser window
Once IT has approved the request:
Ask the user to open a new Incognito or Private browser window.
From Vincere, start the mailbox connection again and complete the Microsoft sign-in and consent prompts.
Using a private browsing window clears cached Microsoft sessions and consent screens and often resolves remaining connection issues.
6. Quick checks if the error still appears
Confirm the user is signing in with the same work account and tenant that the admin used to grant consent.
Check that the admin granted consent for the Enterprise application: VincereMailV3, not a different or older app.
If you have just enabled the admin consent request workflow, wait up to one hour, then ask the user to try connecting again.