Skip to main content
Outlook API Permissions

Configuring API permissions for Outlook to allow Tesorio email connection

Updated over a week ago

If you're unable to connect your email to Tesorio due to a permission issue, please forward this article to your Microsoft administrator for assistance.

In this article:

Overview

Tesorio integrates directly with Outlook to send and receive emails through Nylas. If your organization requires approval to authenticate third-party apps, you'll need to authorize Nylas/Tesorio as an administrator.

Authorize an application as an administrator

As an administrator, you can authenticate end users to your application on their behalf. In some cases, end users might not be able to authenticate without permission from an administrator or the company. When this happens, end users can submit approval requests from the "Approval required" notification:

  1. The end user enters their reason for requesting access and clicks Request approval.

  2. Microsoft emails the administrator to notify them that an end user has requested approval.

  3. The administrator logs in to the Microsoft Entra admin center and navigates to their Admin consent requests.

  4. The administrator reviews their pending requests and either grants or denies access.

After the email administrator approves their request, the end user can restart the authentication process and connect their account to Nylas.

Grant admin approval for API permissions

To grant admin consent for API permissions, follow these steps:

  1. Log in to the Microsoft Entra admin center and select Applications > Enterprise applications in the left navigation.

  2. Select the application you want to work with.

  3. Choose Permissions in the left navigation.

  4. Follow the steps on the page to grant admin consent.

The Microsoft Entra admin center showing the "Permissions" page for a sample enterprise application.

Delegated Graph API Permissions for Outlook

Permissions the API will access include:

  • offline_access

  • openid

  • profile

  • User.Read

  • Mail.Read

  • Mail.Read.Shared

  • Mail.ReadWrite

  • Mail.ReadWrite.Shared

  • Mail.Send

  • Mail.Send.Shared

Did this answer your question?