Simple definition
Admin consent is an administrator's authorization for an application to use requested organization-wide Microsoft identity permissions.
Purpose and use
Entra admin consent authorizes application permissions requiring privileged approval or a tenant-wide decision.
How does it work?
Granted access depends on permission type and scope, including delegated access or application permissions without a signed-in user.
Example and verification
When evaluating an application, identify its publisher, target resources and actual requested access level.
Points to watch
A verified publisher or consent screen does not prove every permission is necessary. Consent does not replace other access and assignment controls.
In short
Base the decision on explicit permissions and review the access actually granted.