Skip to main content

 

Eptura Knowledge Center

Microsoft 365 admin account

  1. Last updated
  2. Save as PDF
The Microsoft 365 admin account provides consent for the Microsoft 365 integration to receive notifications from the subscribed calendars, and to amend calendar appointments.

An Application Access Policy can be configured to allow or deny access to specific Microsoft Outlook calendars. Learn more about configuring an Application Access Policy at Microsoft https://learn.microsoft.com/en-us/ex...ccess-policies

Accepting permissions

During the onboarding process, you are prompted to grant the Microsoft 365 admin account access to the Eptura Engage Token Provider application that uses Microsoft Graph. The permissions granted are described in the table below.

Required permissions
Permission
Permission type
Why is it needed?
User.Read - Sign in and read user profile Delegated The Microsoft 365 integration needs to read the profile of the Exchange administrator who signs in and grants consent to retrieve the Microsoft 365 tenant details.
User.ReadBasic.All - Read the basic profile details of all users Application Required to get a user’s basic details (including GUID identifiers), which are used when subscribing.
Calendars.ReadWrite - Read and write calendars in all* mailboxes Application

Read and write permissions on calendars are needed to manage bookings within calendar events.

The Microsoft 365 integration uses Application Permissions rather than delegated permissions when accessing a calendar, meaning consent is granted on behalf of all calendars within the scope, without the end-user needing to grant access themselves.

*Administrators can configure an application access policy to limit access to specific mailboxes even when the app has been granted Calendars.ReadWrite application permissions.
Place.Read.All - Read all company places Application Allows the app to read company places (conference rooms and room lists) for calendar events and other applications, without a signed-in user.