AADSTS65004

What it means

The user declined consent.

How to fix it

Expected if the user chose to. If they need the app, use the admin consent workflow.

How to investigate

1. Open the Enterprise App and check Users and groups (assignment) and Permissions (consent).
2. Check whether user consent is allowed for this kind of permission, or whether an admin needs to grant it.
3. Look at the app's requested permissions in the sign-in request or app registration.
4. Search the sign-in logs for the request ID or correlation ID from the troubleshooting details on the error page.

Guides on this site

• Lock down app consent without blocking your users

Tools that help

• Graph permission explainer
• GUID lookup
• Microsoft's error lookup for 65004 ↗