Troubleshooting: "Need Admin Approval" Error
This article outlines the steps your IT administrator must take to enable the integration.
When attempting to connect your email account in Cru, you may encounter a message from your provider (for example, Microsoft 365) stating “Need admin approval.” This indicates your organization’s admin needs to grant access before you proceed.
Why this happens
Some organizations restrict app access for external tools until an administrator reviews and approves the permissions. Because Cru requires permission to securely access your AP/AR inboxes, this approval step is necessary for the integration to succeed.
What your IT administrator needs to do
-
Become a user in your Constrafor account. [How to guide here]
- Log into your Constrafor account.
-
Navigate to the “Cru” tab in the main navigation. [How to guide here]
-
Select Integrations.
-
Click Add Email, choose the relevant provider (e.g., Microsoft or Google), and authenticate.
-
Approve the access request when prompted.
Once this one-time setup is complete, the “Need admin approval” message will no longer appear for other users in your organization, and you can connect any inbox without requiring additional admin steps.
Next steps for end users
After the admin has approved:
-
Return to the Cru → Integrations section.
-
Click Add Email and proceed through the secure authorization flow again. This time the process will complete without interruption.
-
Connect your desired inbox(es) — such as “ap@company.com” and “ar@company.com” — to start syncing.
Security you can trust
Constrafor remains SOC 2 compliant and uses encrypted, token-based authentication to link your email accounts. We never store your email credentials, and all access is read-only and secured at every step.
Tip
Once admin approval is granted, users throughout your organization can connect their inboxes independently.