Glossary
Admin consent
Admin consent is an administrator granting an application permission on behalf of the whole organisation, so individual users are never prompted. In Entra ID it requires the Global Administrator or Privileged Role Administrator role.
This is the source of a very expensive misunderstanding. Approving a SharePoint Framework package's API request is not the same thing: it happens in the SharePoint admin center and the SharePoint administrator role is enough.
The distinction routinely stalls deployments for weeks, because IT assumes a web part needs tenant-wide global admin consent when it usually needs nothing of the sort.