_White_Background_square_1920px.png?width=256&height=96&name=FLEETWATCH%20Fleet%20Information%20Technology%20by%20S%26A%20Systems%2c%20Inc%20(06_28_2021)_White_Background_square_1920px.png)
Fleetwatch FMS · Data Tools Login
Why Do I See “Need admin approval” When I Sign In with SSO?
This Microsoft screen means your agency’s Microsoft Entra ID (formerly Azure AD) hasn’t yet approved the Fleetwatch Cloud app for single sign-on. Only an Entra ID administrator can approve it. It’s a one-time approval on your agency’s side, and nothing needs to change in Data Tools.
Not an Entra ID admin? You can’t fix this yourself. Send this article to your IT department or whoever manages your Microsoft 365 / Entra ID.
Who Can Approve It
Someone in your agency’s Entra ID tenant with one of these roles:
- Global Administrator
- Privileged Role Administrator
- Cloud Application Administrator
- Application Administrator
Option 1: Grant Admin Consent in the Entra Admin Center
This approves the app once for every user at your agency.
| 1 | Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator. |
| 2 | Go to Entra ID > Enterprise apps > All applications. |
| 3 | Search for your agency’s Fleetwatch Cloud app and open it. It’s usually named after your agency, such as <Agency> Fleetwatch Cloud. Not sure which one? Contact Fleetwatch Support. |
| 4 | Under Security, select Permissions. |
| 5 | Review the requested permissions, then click Grant admin consent for <your agency>. |
After that, users won’t see the prompt again unless the app later asks for new permissions.
Option 2: Approve It from the Sign-In Screen
An admin can click “Have an admin account? Sign in with that account” on the same “Need admin approval” screen, sign in, and approve the app there.
After Consent Is Granted
Is “Assignment required” set to Yes on the app? Then the user, or a group they belong to, must also be listed under Users and groups on the Fleetwatch Cloud app. Otherwise they’ll get a different access error after consent is granted.
Most agencies assign Entra ID security groups, one for each Data Tools access level, rather than individual users:
Example: one Entra ID group for each Data Tools access level. Your agency’s name is the prefix on each group.
Don’t change your tenant-wide user consent settings to get around this. Admin consent for this one app is all that’s needed.
Then have the user close the browser and try signing in to Data Tools again.
Questions about the permissions the app requests? Contact Fleetwatch Support and we’ll get answers from our engineering team.