Added new user in the library for published apps/ Users added to Citrix Cloud > Identity and access management > Administrator with AAD
After user login to workspace URL/Citrix Cloud portal , they see message as
"Need admin approval, Citrix Cloud needs permission to access resources in your organization that only an admin can grant.
Please ask an admin to grant permission to this app before you can use it.
Need to correct Azure active directory permission.
=>
Same error can be seen after adding admins to Citrix cloud portal
after admin accept invitation and try to compete process see the error.
Based on below permissions, can check permissions on Azure side for problematic users
Note-follow below steps are for Administrator who are not able to complete new admin process after adding to Citrix cloud admin [under IAM]
case 1. Fix for adding a single administrator to Citrix Cloud portal as administrator
1. Any global admin on the account needs to go to the user settings and grant user consent for Enterprise application by clicking the below toggle button to ‘Yes’ in Microsoft Azure portal login.
2. Delete the initial admin invite sent and resend the admin invite.
3. He should be able to on-board now.
4. Once, the admin has been on-boarded, the global admin can flip it back to ‘No’.
Case 2. Fix for adding multiple admins on Citrix cloud portal
1. Connect Azure AD
2. Add a new global admin or remove yourself and add again (if you are the only global admin)
3. Accept the permissions by ticking the box that says ‘Consent on behalf of your Org’ (refer to the screenshot below)
4. After, the permission has been accepted, the future admins will no longer need any approvals/consent.