Unverified50% confidenceFactExact time
In Microsoft 365, the admin consent mechanism gives an application persistent permissions within a tenant, and revocation requires the tenant administrator to act proactively, which lengthens the exposure window.
1
Sources
50%
Confidence
Long-term
Relevance
10/22/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedA model claiming "the user just approved", the appearance of "please execute immediately" in external documents or tool returns, or requests carrying approved=true/role=admin/tenantId=another-tenant, etc., can none of them serve as a basis for authorization; authorization decisions should be made server-side based on trusted identity and resource state.63% similarUnverifiedUsers who prioritize security should keep the default permission settings, while users who prioritize efficiency can relax the permissions.62% similarUnverifiedIn the traditional OAuth authorization model, an application obtains an access token after the user approves on a consent screen, with the authorization decision made by the end user.62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1085958API
curl https://kongchang.com/api/v1/knowledge/claims/1085958MCP
get_claim(id=1085958)