Applicable plans: ❎ The free plan,  ❎The complete plan, ❎On-demand plan

When trying to add Waldo Booking App to Microsoft Teams, some users may encounter the error message:

“You don’t have permissions to add this app.”

Microsoft recently introduced updates to the Teams App Management and Azure Active Directory (AAD) integration, and some apps now rely on features in the latest Application Manager / Teams app framework.

Here’s what happens:

• If your tenant is still on an older version of the Teams app management or hasn’t fully configured the new app policies in Azure, users may see the “You don’t have permissions to add this app” error.
• Even if permissions are correctly set in the Teams Admin Center, the underlying Azure/AAD configuration may block the app until the tenant is updated.
• Deploying or updating the new application manager usually resolves this by syncing app permissions properly and enabling the app to be added by users.
  
  

Recommended steps:

1. Confirm your tenant has the latest Teams app management / Application Manager deployed.
   • Sign in to Teams Admin Center
     https://admin.teams.microsoft.com/
   • Go to Teams apps > Manage apps
   • Search for Waldo
   • Open the Waldo app and verify:
     • Status = Allowed
     • Available to:
       • Everyone → all users can install
       • Specific groups → only users in those groups can install
   • Go to Teams apps > Permission policies
   • Check the policy assigned to affected users:
     • Third-party apps = Allow
     • Waldo app = Allowed
       
2. Ensure Azure AD app consent policies allow the Waldo app or third-party apps for your users.
   1. Go to Microsoft Entra admin center
      https://entra.microsoft.com/
   2. Navigate to Enterprise applications
   3. Search for Waldo
   4. Open the app and go to Permissions
   5. Click Grant admin consent (if not already granted)

   ⚠️ This step is critical, especially after Teams or app updates.
   
   

3. After deployment, users should sign out of Teams completely and sign back in to pick up the new permissions.
   Note :
   - Clear cache (optional)
   - Changes may take a few hours to fully apply
   
   
4. If the issue persists, your IT admin can check audit logs in Azure to see if the app add attempt is being blocked by policy.

💡 In short: delaying the deployment of the newest Application Manager in Azure can indeed trigger this permission error.