Fix “App Launch Failed” for QNAP/Synology with Microsoft 365 Admin Consent
If your NAS (QNAP Hybrid Backup Sync, Synology, etc.) can’t connect to OneDrive/SharePoint and shows App launch failed, this guide gives you a full troubleshooting workflow: from verifying licenses to fixing redirect bugs and managing tenant‑wide consent.
1) Typical symptoms
- “App launch failed” with correlation ID and timestamp.
- Admin consent popup closes but nothing happens.
- User licensed for OneDrive but connection still blocked.
2) Root causes
Missing admin consent
Enterprise application lacks required OneDrive/SharePoint scopes.
Assignment misconfig
“Assignment required” set to Yes without users/groups assigned.
Conditional Access
Policies block non‑Microsoft apps or require compliant devices.
Redirect bugs
Popup closes before NAS receives token; cache or firmware issue.
Contact a Freelancer on WhatsApp for Live Support
Need quick help with Microsoft 365, Conditional Access, or NAS backups?
3) Quick fix
- Entra admin center → Enterprise apps → open NAS app.
- Permissions → Grant admin consent → ensure all scopes show Granted.
- Properties: Enabled for sign‑in = Yes, Assignment required? = No.
- If popup fails, use direct URL:
https://login.microsoftonline.com/<TENANT_ID>/adminconsent?client_id=00000000-0000-0000-0000-000000000000(Replace with actual QNAP or Synology App ID)
4) Step‑by‑step approval
A. Verify license
Ensure OneDrive/SharePoint enabled in admin.microsoft.com → Active users.
B. Grant admin consent
Open app → Permissions → Grant admin consent. Confirm Files.ReadWrite.All, Sites.ReadWrite.All, offline_access all show Granted.
C. Review properties
Set Assignment required = No, or assign groups if Yes.
D. Conditional Access
Exclude the NAS service account or configure MFA/compliant devices.
E. Firmware & session hygiene
Update QNAP/Synology to the latest firmware. Remove stale connector and clear Microsoft login cookies.
5) Tenant‑wide consent
6) Checklist
1. License: OneDrive/SharePoint enabled for account
2. Enterprise app sign‑in = Yes
3. Admin consent: all scopes show Granted
4. Assignment required: set to No (or assign groups)
5. Conditional Access: review/exclude app
6. Firmware: NAS updated, re‑add OneDrive connector
7) FAQ
Q1: “App launch failed” still appears after consent?
A1: Confirm scopes are granted for tenant, assignment is correct, and Conditional Access isn’t blocking.
Q2: Consent window closes without result?
A2: Run the direct admin consent URL, then retry from NAS after clearing Microsoft cookies.
Q3: Can I allow all apps globally?
A3: Yes, in Consent & permissions → User consent settings. But for security, prefer a dedicated service account.
Q4: Do I need to repeat this for every NAS?
A4: Once consent is granted and assignment configured for the vendor app ID, it works across devices—no repeat setup needed unless app ID changes.
