Skip to content
Create Ticket
  • There are no suggestions because the search field is empty.

Grant consent failed with error: Claim is invalid

How to fix this unique error when adding permissions in Entra

Introduction

1-Error

Grant consent failed with error: Claim is invalid: self_service_device_delete does not exist in client application’s RequiredResourceAccess.

This means:
  • The scope or permission called self_service_device_delete is being requested
  • But the application that is being granted this consent doesn’t declare this permission in the RequiredResourceAccess configuration.
  • As a result, Entra refuses to grant consent because it is seen as in invalid claim
The cause:

When an app requests access to resources it must first:

  1. Declare the permission in the Azure API permissions portal
  2. Be granted admin consent for that permission
The Resolution:

1.Open your Entra ID admin centre → App Registrations → select the app that needs consent.

2-AppReg

2.Under API permissions select “Add a permission”

3-AppReg2

3.Select “Microsoft Graph API” then add the self_service_device_delete permission

4.After adding the permission, select “Grant admin consent for MSFT”.

4-Privs

Once done this error should be resolved, if you have added this permission and still getting the same error, waiting 5-10 minutes has resolved the issue for us in past cases.