How to Add an Authorized Application to a User?

I don’t think this is causing the error you are getting. If the grant was deleted or the consent was never given, the user should be prompted for it.
Is it possible that you have a rule throwing an “Access denied” error under certain circumstances?