要約

When setting up an Office 365 account as an incoming mail server users are shown a pop-up window with the following error:

"Jira Cloud / Atlassian needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it".

原因

The most common cause is users not having permission to complete OAuth consent screens for applications unless they are an admin within your Office 365 tenant. Jira Cloud uses OAuth as a more secure way to authorize scoped access to your Office 365 mailbox vs username and password.

ソリューション

Note: You need to have a Global Administrator or a Privileged Administrator on Azure portal to perform the changes, if you do not have the permissions please contact your Administrator. 

The easiest way to allow your account to connect is to enable user access to Enterprise apps. Once you enable this setting, you should be able to complete the authentication process to add a new incoming mail server.

You can disable this setting once the Incoming mail account is connected successfully.

 Pro-Tip

If Comfortable with advanced configurations in Office 365, You can also create a group policy to override this setting for specific users instead of toggling tenant-wide.

You could also allow users to request an administrator's review and approval of an application that the user isn't allowed to consent to, enable the admin consent workflow. For example, you might do this when user consent has been disabled or when an application is requesting permissions that the user isn't allowed to grant.