Need Admin Approval to Connect Your Work Calendar?

What the Message Means

You sign in with your work account to connect your calendar to a scheduling, booking or sync app. Instead of the usual permissions screen, Microsoft shows Need admin approval. On Google Workspace you see a message that your organisation's administrator has blocked the app or has not approved it.

Nothing is wrong with your account, and usually nothing is wrong with the app. Most often, your organisation's settings do not let employees give third-party apps access to company data on their own. Microsoft also applies a rule of its own: people cannot approve some newer apps themselves until Microsoft has verified who publishes them. Either way, only an administrator can approve the app, for you or for everyone in the organisation.

• Microsoft 365: this is controlled by the user consent settings in Microsoft Entra ID (formerly Azure Active Directory). When user consent is turned off, every app that asks for access shows Need admin approval. Microsoft explains the options in its overview of user and admin consent.
• Google Workspace: this is controlled in the Google Admin console, under Security, then Access and data control, then API controls, where admins decide which third-party apps can use Workspace data.

It only affects work and school accounts. A personal Outlook.com or Gmail account never needs an administrator's approval.

Step 1: Check It Is Really an Admin Block

Two other problems can look similar:

• You pressed Cancel. If you saw a permissions screen and declined it, that is not an admin block. Try again and accept.
• You opened the link inside another app. Google refuses sign-in inside some in-app browsers (for example, a link opened from a chat or email app on your phone) and shows an error mentioning disallowed_useragent. Open the link in Safari or Chrome instead.

If your organisation has turned on Microsoft's admin consent workflow, you see Approval required instead, with a box to explain why you need the app. Fill it in and submit it: the request goes to the reviewers your organisation has chosen.

If you saw Need admin approval (Microsoft) or a message naming your administrator (Google), it is a policy block, and only your admin can lift it.

Step 2: Find Out Who Approves Apps

In a larger company this is the IT helpdesk. In a small business it is whoever set up Microsoft 365 or Google Workspace: often a founder, an office manager or an outside IT provider. If you are not sure, ask who manages your company email. The same person almost always manages app approvals.

Step 3: Send a Request Your Admin Can Act On

A vague "can you unblock this?" tends to sit in a queue. A request an admin can act on says four things:

1. What the app is: its name and website
2. Why you need it: for example, to stop double-bookings between your work and personal calendars
3. What it can access: ideally your own calendar only, not mail, files or other people's calendars
4. How to approve it: for Microsoft 365, the app's admin consent link; for Google Workspace, where in the Admin console to allow it

A short template you can adapt:

Hi, I would like to connect my work calendar to [app name] ([website]), which I use to [reason]. Our settings require admin approval for third-party apps. It asks for access to my own calendar only. Could you approve it for our organisation? [For Microsoft 365: the admin consent link. For Google Workspace: it is under Security, then Access and data control, then API controls, then Manage third-party app access.] Thank you.

What Your Admin Does

Microsoft 365

The quickest route is the app's admin consent link. An administrator with permission to grant consent opens it, signs in, reviews the permissions the app asks for and accepts on behalf of the organisation. After that, people in the organisation can connect the app without seeing Need admin approval. The app then appears in the Microsoft Entra admin center under Enterprise applications, where the admin can review it or remove it later.

When reviewing, it is worth checking two things: that the permissions are delegated (the app acts only for the person who signed in, within what that person can already see), and that they are limited to calendars. A calendar sync app should not need access to mail or files.

Google Workspace

In the Google Admin console, under Security, then Access and data control, then API controls, then Manage third-party app access, the admin finds the app (by name or by its client ID) and changes its access so it can use Google Calendar data. Once that is saved, people in the organisation can connect it.

How CalendarSync Handles It

CalendarSync recognises this block when you try to connect and tells you what happened instead of showing a generic error. It then offers a button that opens a ready-written approval request to your admin in your email app:

• Microsoft 365: the email includes Microsoft's standard admin consent link for CalendarSync and lists exactly what it asks for: delegated calendar read and write for your own account (Calendars.ReadWrite), plus the sign-in basics (openid, email, profile, and offline_access, which keeps the connection working without signing in again).
• Google Workspace: the email tells your admin where to allow the app in the Admin console, and that CalendarSync asks for access to your own calendar only, to read and write events.

CalendarSync never asks for your mailbox or files. While you wait, you can connect a personal Google, Outlook or Apple calendar straight away.

Waiting for IT does not cost you trial days. CalendarSync's 7-day free trial starts when you create your first sync, not when you sign up or connect a calendar, and it needs no credit card. Once your admin approves, connect the work calendar and create your sync, and the 7 days start then.

If Your Admin Says No

Some organisations do not allow third-party calendar apps at all, and that is their decision to make. Without access to your work calendar, no sync tool can write busy blocks into it, so the options become manual:

• Add your personal commitments to your work calendar yourself, marked private and set to Busy, so colleagues see that you are taken but not why
• Ask whether IT already approves a scheduling or sync tool you could use instead

The Bottom Line

Need admin approval is a policy, not a fault. Confirm it really is an admin block, find the person who manages your company's Microsoft 365 or Google Workspace, and send them a specific request: what the app is, why you need it, what it can access and how to approve it. A specific request is far easier for an admin to say yes to than a vague one.

Once your work calendar is connected, the next problem is usually colleagues booking over personal commitments. See how to hide personal calendar events from coworkers for the setup that keeps both calendars accurate without exposing details.