"Why would you need to temporarily grant the access...? " When you say grant access are you referring to giving the helpdesk email global admin permission within office 365 or are you referring to "consent on behalf of your organization".
As I understand it, the option to "consent on behalf of your organization" only appears as an option if the user signing in, in this case the helpdesk email associated with osticket, has admin privileges within o365. So we grant the admin privileges within office 365 temporarily so we can consent to those permissions, but we don't want to leave that o365 account with admin privileges within o365 when all we need it to do is retrieve email for osticket.
