Your organization has disabled user consent for applications so that users can no longer grant permissions to third-party apps on their own. Developers report that legitimate low-risk SaaS apps are now blocked, and the IT security team is overwhelmed reviewing every request manually. You need to allow users to request access to apps while ensuring an administrator approves each request before consent is granted, with minimal ongoing administrative effort. What should you configure in Microsoft Entra ID?