I'm a global admin, attempting to approve a user's request for a range of permissions for an external app. After I approve, the associated permissions are displayed for that app: 
However, when the user tries to use the app, they get the same request, with the same permissions. I've removed all the permissions via PowerShell and resubmitted the approval, but no change.
If you have granted tenant-wide consent, there's nothing else required. Give it few mins to propagate just in case. If the application keeps asking for this, have the user sign out completely, clear any app cache, and sing in again to obtain a token with all the above permissions. It's also possible that the app is calling the consent endpoint directly, which is something the app publisher should resolve.
3 people are following this question.
