Office365/Azure offers a number of different levers that affect consent and permissions for apps such as Gem. This is a guide on these settings, all of which can only be changed by an Azure administrator.

To allow users to consent for themselves

In Azure portal, select Azure Active Directory > Enterprise applications > Consent and permissions > User consent settings. Select the option “Allow user consent for apps” for user”consent for applications” setting. This will allow users to consent for apps for themselves and will not require admin’s intervention. More details can be found on Azure documentation.

To allow users to submit consent requests to admins

In Azure portal, select Azure Active Directory > Enterprise applications > Manage > User settings. Select “Yes” for “Users can request admin consent to apps they are unable to consent to”. You should also select other appropriate settings in the admin consent request flow. This will allow users to submit a request to an Azure admin when they need to consent to Gem. More details can be found on Azure documentation.

To grant admin consent to Gem

Admins can grant consent permissions to Gem on behalf of the whole organization. Once an admin has done so, non-admin users will be able to sign in and integrate with Gem without further admin intervention. To do so, an Azure admin should open https://www.gem.com and click login in the upper right corner:

Once logged in, Gem will present a permissions dialog:

Clicking “Grant Access” will bring up a window with the following dialog:

Make sure to check “Consent on behalf of your organization” and click “Accept”. This completes the admin consent for the organization and subsequent user sign-ups will not require admin intervention.

To assign users or groups to Gem

If you only want certain users to have access to Gem, you can assign specific users or groups to Gem and no other users in your Azure AD will be able to have access to Gem. To do so, in Azure portal, select Azure Active Directory > Enterprise applications > All applications, find Gem in the list of applications and select it. Then select Manage > Users and groups. You can then use the “Add user” button to add selective users for Gem.

Did this answer your question?