> ## Content Index
> Fetch the complete content index at: https://www.agentsecbrief.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# What is multi-tenant app consent?
- URL: https://www.agentsecbrief.com/what-is-multi-tenant-app-consent/
- Published: 2026-10-23T15:17:52.000Z
- Updated: 2026-10-23T15:17:52.000Z
- Description: Multi-tenant app consent is the approval that lets a vendor's app sign in to your Microsoft 365 or Google tenant with its own identity, without any user, so whoever controls that app's credentials inherits its access in every customer tenant at once.
- Author: Angela Milash
- Tags: Agent Identity & Auth, Supply Chain, Glossary

Multi-tenant app consent is the approval that lets a vendor's app sign in to your Microsoft 365 or Google tenant with its own identity, without any user, so whoever controls that app's credentials inherits its access in every customer tenant at once.

## Why it matters

Backup, security and AI tools often hold broad admin-consented permissions. User MFA does not protect these sign-ins, because no user is involved. AI agents can now try such identities across thousands of tenants in minutes.

## Example

On 21 Oct 2026 Microsoft said China-aligned Storm-0940 used ARTEX AI agents and hijacked ConnectWise app identities to sign in to 2,250+ tenants, reaching admin in some within 3 hours ([Microsoft](https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/?ref=agentsecbrief.com)).

## How to defend against it

- Review admin-consented apps every quarter and remove unused ones.
- Grant each app the least privilege it needs.
- Restrict app-only sign-ins with conditional access for workload identities.
- Alert when an app adds credentials or role assignments.

See the matching controls in the [AgentSec Brief checklist](https://www.agentsecbrief.com/checklist/).

## Related terms

Non-human identity; Token and privilege compromise; Least privilege

## Sources

- [Microsoft Threat Intelligence, 21 Oct 2026](https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/?ref=agentsecbrief.com)

*From AgentSec Brief, the daily brief on securing agentic AI. Subscribe free at https://www.agentsecbrief.com*