> You are reading the Docusign Developer Documentation. For clean Markdown of any page, append .md to the page URL. > > Documentation indexes by section: > - APIs and SDKs: https://docusign.docs.buildwithfern.com/docs/llms.txt > - Platform 101: https://docusign.docs.buildwithfern.com/platform/llms.txt > - Extension Apps: https://docusign.docs.buildwithfern.com/extension-apps/llms.txt > - Docusign CLI: https://docusign.docs.buildwithfern.com/docusign-cli/llms.txt > > Authentication (OAuth, JWT Grant, M2M): https://docusign.docs.buildwithfern.com/platform/auth > Webhooks and Connect: https://docusign.docs.buildwithfern.com/platform/webhooks > > OpenAPI specifications: https://docusign.docs.buildwithfern.com/openapi.json > MCP server: https://docusign.docs.buildwithfern.com/_mcp/server # Obtain and revoke consent > Learn how to obtain consent from your users or revoke consent from an app. In most Docusign Authentication workflows, a customer application or integration will make API calls on behalf of a user, acting as them to create envelopes, add documents, and send these files out for signing. Each of these workflows requires that the user grant explicit consent for the application to act on their behalf (although, once granted, that consent will be remembered until it is revoked), which can create an additional step for users working with the app for the first time. Revoking consent invalidates any refresh tokens the application may have and requires that the application obtain the user’s consent again before any new tokens can be generated for the application. Live access tokens and JWT tokens (see [JSON Web Token (JWT) Grant](/platform/auth/jwt) for details) will remain active and can still be used to make API calls until they expire naturally. You may choose to revoke consent on an individual basis, or for an entire organization. Docusign provides three options for obtaining consent from users for an application to act on their behalf. * [Individual consent](/platform/auth/consent#individual) * [Organization administrator consent for an application owned by your organization](/platform/auth/consent#internal) * [Organization administrator consent for an application not owned by your organization](/platform/auth/consent#external) ## Obtaining individual consent When an application authenticates to perform actions on behalf of a user, that user will be asked to grant consent for the set of [scopes](/platform/auth/reference/scopes) (sets of permissions) that the application has requested, unless they have previously already granted that consent. For details on how to obtain individual consent, see [How to obtain individual consent](/platform/auth/consent/obtaining-individual-consent). ## Obtaining admin consent for internal apps You can simplify the process of getting consent from your company’s users by using the [Docusign Administration](https://support.docusign.com/s/document-item?rsc_301&_gl=1*r87cw1*_gcl_au*MTg0MTMzMDg3MS4xNzM3OTk3MzU1\&bundleId=rrf1583359212854\&topicId=ops1583359137726.html) panel to consent on behalf of all members of your organization simultaneously. See [How to obtain admin consent for internal applications](/platform/auth/consent/obtaining-admin-consent-internal) for more details. > **Note** > > The Docusign Admin feature is not enabled for all accounts. Please contact your Docusign sales representative if you need to enable Docusign Admin. ## Obtaining admin consent for external apps Docusign Admin enables administrators to grant consent to applications on an organization level, but it only directly supports granting consent to internal applications (applications whose integration keys are owned by your organization). You can grant consent to applications whose integration keys are not owned by your organization by calling an authentication endpoint with a special scope, logging in, and granting consent on behalf of your organization. See [How to obtain admin consent for external applications](/platform/auth/consent/obtaining-admin-consent-external) for details. ## Revoking individual consent Individual users can revoke their consent from any application using their profile preferences. To revoke consent for an app to make calls on your behalf or impersonate you: 1. Open the [Apps and Keys](https://admin.docusign.com/authenticate?goTo=apiIntegratorKey) page. 2. Select your profile picture at the top right of the screen and choose **Manage Profile**. 3. Select the **Connected Apps** tab. This shows you a list of all apps that you have given consent to make calls on your behalf. 4. Select **Revoke** on an app's row to revoke its consent. ![Revoking individiual consent in the web app](/_fern-files/_img/74af77ec6d54661e955537beadc25120e8a14bac3f6d5d6e015308aabb142f24.webp) ## Revoking Docusign Admin consent In cases where user consent was provided by an organization administrator (such as the [JWT Grant](/platform/auth/jwt)), this consent can be revoked with the Docusign Admin tool. > **Note** > > Users who are members of the organization's reserved domains cannot revoke consent individually. ## Next steps * See [How to obtain individual consent](/platform/auth/consent/obtaining-individual-consent). * See [How to obtain admin consent for internal applications](/platform/auth/consent/obtaining-admin-consent-internal). * See [How to obtain admin consent for external applications](/platform/auth/consent/obtaining-admin-consent-external). > Learn how to obtain consent from your users or revoke consent from an app. ## Docs - [How to obtain individual consent](https://developers.docusign.com/platform/auth/consent/obtaining-individual-consent.md): Demonstrates how to obtain individual consent for an app to act on their behalf in the eSignature API. - [How to obtain admin consent for internal applications](https://developers.docusign.com/platform/auth/consent/obtaining-admin-consent-internal.md): Describes the procedure for obtaining admin consent for internal applications - [How to obtain admin consent for external applications](https://developers.docusign.com/platform/auth/consent/obtaining-admin-consent-external.md): Integration developers can obtain consent from another organization’s users by having an admin of that organization grant consent on their users’ behalf.