How to resolve Microsoft Azure Permission Issue

Share this guide with your IT admin responsible for Microsoft Aszure configuration.

Microsoft Azure Permissioning Issue
If you receive an error message during the authentication flow that says

AADSTS650052: The app needs access to a service (ads.microsoft.com) that your organization has not subscribed to or enabled

, then this indicates an Azure tenant provisioning issue, meaning that the user attempting to authenticate Bing does not have the necessary level of permissions required to allow third-party-apps to make changes on their behalf.

Steps to resolve:

First, ensure that log-in attempts are occurring from a work account, and not a personal account.
If a log-in attempt from a work account fails, an Azure tenant admin at your organization will need to login to the Azure portal with a work account in order to unblock provisioning.
Under the section titled User consent for applications, your admin will need to select Allow user consent for apps(otherwise, the user trying to grant ProfitMetrics access to Bing won’t have the permission of Microsoft’s ads service until this setting is provisioned)
Once the policy has been updated, a simple log-in to the Bing Ads site from a user from that tenant should unblock the provisioning. To check that that’s the case, in the “API permissions” tab of an (owned) app registered in that tenant, you should be able to see and select “Microsoft Advertising API Service” as a dependency, like this:

More Information on Azure Settings
Additional information from Microsoft can be found here: Configure how users consent to applications - Azure AD | Microsoft Docs