Skip to main content
Microsoft may block sign-in because Granola needs admin approval or because your organisation’s Conditional Access policy requires Microsoft Edge on mobile. Match the message you see to the section below.

​
Sent to Microsoft Edge on iPhone or Android

After you choose Sign in with Microsoft, you may be told to open Microsoft Edge. You might then see Managed browser required, No available apps, or a message that the app could not be opened. Sign-in never returns to Granola. This happens when your organisation’s Microsoft Entra Conditional Access policy:
  • Applies to browser sign-ins; and
  • Uses Require app protection policy or Require approved client app as a grant control.
Granola opens Microsoft sign-in in a secure browser window. Microsoft only allows Edge to satisfy these grant controls for browser sign-ins, so it sends the sign-in to Edge. Turning on Intune app protection for Granola will not fix this. Granola does not support Intune app protection during sign-in. A Microsoft 365 admin must change the Conditional Access policy instead.

​
Admins: change the Conditional Access policy

  1. In the Microsoft Entra admin center, open Sign-in logs and select the failed Granola sign-in.
  2. Open the Conditional Access tab and identify the failing policy. Under Basic info, check the Application, Resource, and Client app fields.
  3. Change that policy in one of these ways:
    • Exclude the affected users or group; or
    • Set its Client apps condition so it does not apply to Browser.
    Excluding only the Granola app is usually not enough: Granola also requests the Microsoft Graph permissions listed below, so the policy may still apply to Microsoft Graph.
  4. Use the Conditional Access What If tool to check the change.
  5. Ask the user to fully close and reopen Granola, then try Sign in with Microsoft again.

​
”Approval required”

When you use “Sign in with Microsoft”, you may see a screen like this: image.png The “Approval required” screen is usually because Granola requests permission to view your calendar events. Granola requests the following Microsoft permissions:
  • User.Read — Read your basic profile (name and email address)
  • Calendars.Read — Read your calendar events
  • Calendars.Read.Shared — Read shared calendars you have access to
Granola also uses standard authentication scopes (openid, email, profile, offline_access) to sign you in. All permissions are read-only — Granola does not request write access to your calendars or any other Microsoft 365 data. If you see the “Request approval” button, we recommend this “justification” message: “I want to use Granola for my meeting notes. Granola needs to read my calendar events so that it can start and stop transcribing at the right times, and so that it can better summarize my meeting notes.”

​
Admins: how to approve Granola

As an admin of your Microsoft 365 organization, to approve your user’s request:
  1. Go to Microsoft Entra admin center > Entra ID > Enterprise apps > Admin consent requests > My pending.
  2. Click on your user’s approval request. It will be called “Granola”: image.png
  3. Click “Review permissions and consent”: image.png
  4. Click “Approve”:
image.png Your Microsoft 365 organization members should now be able to sign in to Granola.

​
If you don’t see the “Request approval” button

You may see “Need admin approval”, without a “Request approval” button: image.png This means your admin needs to enable “Admin consent requests”. As an admin of the Microsoft 365 organization:
  1. Go to Microsoft Entra admin center > Entra ID > Enterprise apps > Consent and permissions > Admin consent settings: image.png
  2. Set the toggle “Users can request admin consent to apps they are unable to consent to” to “Yes”.
  3. Ask the user to try signing in to Granola again. They should see a “Request approval” button.
  4. Follow the flow above to approve the request.
If you are unable to enable “Admin consent requests”, one way to approve Granola for your organization is to sign in to Granola using your admin account. Download Granola, launch it, click “Sign in with Microsoft”, and you should see: image.png Check the box “Consent on behalf of your organisation”, then “Accept”. You will be signed in to Granola, and your users will now be able to sign in too.

​
Admins: if you can’t sign in to Granola yourself

We are in the process of adding Granola to the “Microsoft Entra App Gallery”. Until then, please use one of the above methods.