TOOLS_OAUTH_CONSENT_DENIED

Issue

The app's sign-in page didn't grant Glean access when you connected a tool or set up a connector. Either you selected Cancel or Deny on the consent screen, or the app requires an admin to approve Glean before anyone can connect. The app returned access_denied, consent_required, or interaction_required.

Examples of admin approval:

• Microsoft Entra ID: the message says Need admin approval, or the error code is AADSTS65001 or AADSTS90094.
• GitHub: the organization restricts OAuth apps, and Glean's app hasn't been approved for it.
• Google Workspace: the app is blocked or not trusted under API controls.

Resolution

1. Select Connect again and, on the app's consent screen, select Allow or Accept.
2. If the app says that an admin must approve, ask your admin to grant consent for your organization.

If you're the app's admin:

• Microsoft Entra ID: in the Entra admin center, go to Enterprise applications, open the app, and under Permissions grant admin consent for your organization.
• GitHub: in the organization's settings, under Third-party access → OAuth app policy, approve the app.
• Google Workspace: in the Google Admin console, go to Security → Access and data control → API controls, and mark the app as trusted.

Then ask people to connect again.

For additional assistance, contact Glean Support.