Outlook setup

The Intric Outlook integration uses Microsoft Graph with delegated permissions: it always acts as the signed-in user, in that user’s own mailbox and calendar. It reads, searches and sends mail, replies and forwards, and manages calendar events. In many organizations Entra requires administrator consent before any user can authorize a third-party app to read and send mail.

This means:

• Many organizations will need admin consent: a restrictive Entra user consent policy blocks users from connecting apps that request mail access
• Admin consent is tenant-wide: once granted, any user in the tenant can connect their own Microsoft account
• Delegated access only: Intric acts on behalf of the signed-in user and reaches only that user’s own mailbox and calendar

You must be a Global Administrator or Privileged Role Administrator in your Entra tenant to complete these steps.

Already set up another Microsoft integration? If you have already granted admin consent for Intric’s Teams, OneDrive, or SharePoint, the Intric app is already registered in your tenant. Check which permissions are already consented in step 1 — you may only need to approve the Outlook-specific permissions.

Step 1: Grant admin consent for the Intric app

1. Go to https://entra.microsoft.com and sign in as an admin
2. Navigate to Identity → Applications → Enterprise applications
3. Search for Intric and open the app entry
4. Go to Permissions and click Grant admin consent for [your organization]
5. Review the requested permissions and confirm

The Intric Outlook integration requests the following delegated permissions:

Permission	Purpose
Mail.ReadWrite	Search and read messages and list folders in the signed-in user’s mailbox
Mail.Send	Send, reply to and forward email as the signed-in user
Calendars.ReadWrite	List, create, update and delete events in the signed-in user’s calendar
User.Read	Sign the user in and read their basic profile
offline_access	Keep the connection working without the user signing in again

If the Intric app is not yet present in your tenant’s Enterprise applications, have a user attempt to sign in once so that the app appears, or add it manually by application ID.

Step 2: Enable Outlook in Intric

Once admin consent has been granted:

1. Open Admin, and under Platform select AI Tools
2. Open Outlook
3. Switch on Available to your organisation

Users will then see Outlook under Integrations in the left sidebar and can connect their own Microsoft accounts.

Step 3: Decide which actions need approval

On the same panel, Capabilities lists the ten actions the integration offers. Each one is set to Off, Ask or Auto:

Capability	Default
Search messages, Get message, List folders, List calendar events	Auto
Send message, Reply to message, Forward message	Ask
Create event, Update event, Delete event	Ask

With Ask, the user approves each run before anything is sent or changed. Switch an action Off if your organization does not want assistants to perform it at all — for example, to keep Outlook read-only, switch off the six actions set to Ask. How the modes work, and how users can be allowed to approve for themselves, is described in Capabilities and approval.

You can also give the integration a Security classification on this panel, so that only assistants in spaces with a matching classification can use it.

Revoking access

To remove admin consent (prevents all users from using the integration):

1. Go to https://entra.microsoft.com
2. Navigate to Identity → Applications → Enterprise applications → Intric
3. Go to Permissions and remove the consent grant for the Outlook-specific permissions

Users who have already connected their accounts will lose access immediately.

To revoke a single user’s access, the user can switch off Outlook under Integrations. An admin can also revoke the token from the Entra admin center under the user’s profile → Applications.

For the end-user guide, see Outlook.