Grant admin consent
Sign in to the Azure portal with an administrator account.
Select "Enterprise applications" from the navigation menu, then select the application you created.
Select "Security" > "Permissions", then click "Grant admin consent for (organization name)".
This needs to be done only once per application. After that, any account in the organization can get a refresh token without approval each time.