You can adjust the your user setting or API permissions to control  how users authenticate against your application.

Need admin approval

Is user tries to authenticate If a user tries to authenticate against an application that has requires and has not been granted Admin consent, the user will be shown a screen that prompts them to continue without the permission or for an admin user to log in and grant the correct permission.

There are two ways an admin can give permissions:

1. Give Admin consent in the API permissions, then re-authenticate the user.

2. Create a new session and sign into the application as an admin user to grant permission.