How to Configure Azure Admin Consent for Adobe Acrobat OneDrive Access
Question details
Administrators need to grant tenant-wide Azure AD consent so non-admin users can access their OneDrive files directly from Adobe Acrobat.
- Product
- Microsoft Entra ID / Adobe Acrobat
- Device & OS
- not provided
- Scenario
- Configuring enterprise-level single sign-on (SSO) and cloud storage permissions for third-party PDF applications.
- Observed behavior
- Non-administrator users are blocked from viewing or opening their OneDrive files in Acrobat Reader DC until tenant-level admin consent is granted.
Ensure you have Global Administrator privileges in your Microsoft Entra ID (formerly Azure AD) tenant before attempting to configure enterprise applications and grant tenant-wide consent.
Grant Tenant-Wide Admin Consent via Microsoft Entra ID
Add Adobe Acrobat as an Enterprise Application in Azure and approve the necessary Microsoft Graph permissions for OneDrive access.
To allow non-administrator users to access their OneDrive files within Adobe Acrobat, the application must be registered and authorized at the tenant level. This prevents individual users from encountering authorization blocks when trying to connect their cloud storage.
Sign in to the Azure portal using a Global Administrator account and navigate to Identity > Applications > Enterprise applications.
Search for 'Adobe Document Cloud' or 'Adobe Acrobat' in the applications list. If it is not present, add it as a new enterprise application to your tenant.
Open the Adobe application settings, click on the 'Permissions' tab under the Security menu, and review the requested Microsoft Graph and OneDrive API scopes.
Click the 'Grant admin consent for [Your Tenant Name]' button. Follow the Microsoft sign-in prompts to authorize the application permissions for all users in your organization.
Log in with a standard non-admin account on a fresh browser session or desktop app, and attempt to open a file from OneDrive within Adobe Acrobat to ensure the integration is successful.
Seamlessly Edit PDFs and Office Files with WPS Office
Skip complex enterprise configurations and security policy errors. WPS Office provides a lightweight, all-in-one suite with native cloud storage integration, allowing you to easily manage Office documents and edit PDFs directly from your cloud drive without extensive admin setup.
- 1. Install WPS Office: Download and install the free WPS Office suite on your computer or mobile device.
- 2. Connect Your Cloud: Open WPS Office, navigate to the 'Open' tab on the dashboard, and select 'Add Cloud Storage'.
- 3. Access Files Instantly: Log into your preferred cloud account to seamlessly open, edit, and save your documents and PDFs directly from the cloud.
Frequently Asked Questions
Why do users get an 'approval required' prompt when opening OneDrive files in Acrobat?
This occurs because Adobe Acrobat requires specific API permissions to read and write files to users' OneDrive accounts. If tenant-wide admin consent hasn't been granted by an Azure Global Administrator, standard users cannot bypass this security prompt.
Can I whitelist Adobe Acrobat without being a Global Admin?
No, modifying Enterprise Application permissions and granting tenant-wide admin consent requires Global Administrator or Privileged Role Administrator rights in Microsoft Entra ID.
How long does it take for Azure admin consent to propagate?
Typically, admin consent applies almost immediately. However, depending on your Azure environment and caching, it may take up to 15-30 minutes for the permission tokens to fully propagate to all non-administrator users.
