If you have an autohosted SharePoint app that requests tenant scope permissions and you set the target site to a local URL you might run into a problem when debugging from Visual Studio.
The certificate is added and the app deploys fine. The user is then prompted to grant the app permission but a message notifies us that the current user does not have permission to trust the app.
Sorry, only tenant administrators can add or give access to this app
So in order to grant a user “tenant administrator” rights in a local farm complete the following:
Add the account (not via a group) to the Farm Administrators role in Central Administration
Do an IISRESET after granting the permission.
When you re-deploy the app from VS the account should now be able to click the “Trust It” button.
And you’re off to the next hurdle…