Resolve the Microsoft Teams “app is blocked” error
Some Microsoft settings can sometimes prevent you from properly receiving Teams notifications.
Elba may report this error when it cannot install the Sam – elba Teams application for one or more users:
App is blocked by app permission policy... AppId: 944f1d1e-bb33-461e-bfee-6dfedad0835eElba records this error after Microsoft Teams rejects the app installation with an HTTP 403 response. It means the affected user is not currently allowed to use the Teams app; the error alone does not identify which tenant setting is responsible.
Microsoft administrator required
Ask a Teams or Global Administrator for the tenant to review the app's availability. Coordinate with your identity or security administrator before changing an Entra policy.
Allow the app in Teams
-
Sign in to the Microsoft Teams admin center.
-
Open the area for managing Teams apps.
-
Search for Sam – elba. If the name does not find it, search for this app ID:
944f1d1e-bb33-461e-bfee-6dfedad0835e -
Open the matching app and confirm that it is not blocked for the organization.
-
Review the app availability or access configuration applied to the affected users or groups. Allow Sam – elba for the intended audience and save the change.
-
Check for another Teams app policy or user/group assignment that still blocks the same users.
-
Retry the Teams app installation or notification flow for one affected user.
Microsoft changes the names and placement of app-management controls over time. Use the controls shown in your tenant to answer two questions: is the app allowed for the organization, and is it available to the affected user?
Keep access changes scoped
Do not disable broad security controls or create a tenant-wide Conditional Access exclusion based only on this error. Allow the app only for the users or groups that should receive Elba Teams notifications, unless your organization intends to make it available to everyone.
If Teams shows the app as allowed
- Confirm that the affected user is included in the app's assigned audience.
- Review the user's effective Teams app access settings for a conflicting assignment.
- Confirm that the Elba Teams integration still has administrator consent in the same Microsoft tenant.
- If Microsoft sign-in logs identify a separate Conditional Access block, ask the identity or security administrator to review that specific result.
After correcting access, retry with an affected user. If Microsoft still returns the error, contact [email protected] with the exact error text, the affected user, and the time of the retry. Do not send access tokens or credentials.