Update manage-app-consent-policies.md

[sachinatraj]

As requested by the user, a new "Note" has been added under the Mail client policy to avoid the misunderstanding that admin consent will be possible for all permissions when the default mail client policy is applied.

[prmerger-automator]

@sachinatraj : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change.

[learn-build-service-prod]

Learn Build status updates of commit 3919b90:

✅ Validation status: passed

File	Status	Preview URL	Details
docs/identity/enterprise-apps/manage-app-consent-policies.md	✅Succeeded

For more details, please refer to the build report.

[ttorble]

@omondiatieno

Can you review the proposed changes?

IMPORTANT: When the changes are ready for publication, adding a #sign-off comment is the best way to signal that the PR is ready for the review team to merge.

#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

[Copilot]

Pull request overview

This PR updates the Microsoft Entra documentation for app consent policies to clarify the scope of the default mail client consent policy, reducing confusion about when admin consent is still required.

Changes:

• Adds a Note under the “Mail client policy” section to clarify that the policy only covers a limited set of delegated mail permissions for specific mail clients.
• Clarifies that admin consent can still be required when requested permissions fall outside that policy’s scope.

[Copilot]

The admonition formatting is broken: line 72 is missing a space after > and line 73 isn’t prefixed with > at all, so the second sentence renders outside the Note block. Prefix each content line with > so the entire note is included.

Suggested change

	>The Mail client policy (microsoft-user-allow-default-consent-apps) allows end users to consent only to a limited set of delegated mail-related permissions for specific mail client applications.
	Therefore, even when this policy is enabled, administrator consent may still be required if an application requests permissions that are outside the scope of the Mail client policy.
	> The Mail client policy (microsoft-user-allow-default-consent-apps) allows end users to consent only to a limited set of delegated mail-related permissions for specific mail client applications.
	> Therefore, even when this policy is enabled, administrator consent may still be required if an application requests permissions that are outside the scope of the Mail client policy.

[Copilot]

Style tweaks for consistency with Microsoft Writing Style Guide: use "might" (not "may") for possibility, and format the policy ID microsoft-user-allow-default-consent-apps as code (backticks) since it’s an identifier.

Suggested change

	>The Mail client policy (microsoft-user-allow-default-consent-apps) allows end users to consent only to a limited set of delegated mail-related permissions for specific mail client applications.
	Therefore, even when this policy is enabled, administrator consent may still be required if an application requests permissions that are outside the scope of the Mail client policy.
	>The Mail client policy (`microsoft-user-allow-default-consent-apps`) allows end users to consent only to a limited set of delegated mail-related permissions for specific mail client applications.
	Therefore, even when this policy is enabled, administrator consent might still be required if an application requests permissions that are outside the scope of the Mail client policy.