Outlook setup

The Intric Outlook integration uses Microsoft Graph with delegated permissions to read mailbox data on behalf of signed-in users. The Mail.Read permission required by this integration is considered sensitive by Microsoft, and in many organizations Entra is configured to require administrator consent before any user can authorize a third-party app to access their mailbox.

This means:

• Many organizations will need admin consent: the default Entra user consent policy in security-restrictive tenants blocks users from independently connecting apps that request mail access
• Admin consent is tenant-wide: once granted, any user in the tenant can individually connect their own Microsoft account
• Delegated access only: Intric always acts on behalf of the signed-in user and can only access that user’s own mailbox

You must be a Global Administrator or Privileged Role Administrator in your Entra tenant to complete these steps.

Already set up another Microsoft integration? If you have already granted admin consent for Intric’s Teams, OneDrive, or SharePoint, the Intric app is already registered in your tenant. Check which permissions are already consented in step 1 — you may only need to approve the Outlook-specific permissions.

Step 1: Grant admin consent for the Intric app

1. Go to https://entra.microsoft.com and sign in as an admin
2. Navigate to Identity → Applications → Enterprise applications
3. Search for Intric and open the app entry
4. Go to Permissions and click Grant admin consent for [your organization]
5. Review the requested permissions and confirm

The Intric Outlook integration requests the following delegated permissions:

Permission	Purpose
Mail.Read	Read messages in the signed-in user’s mailbox
MailboxSettings.Read	Read the user’s mailbox settings (e.g. time zone, language) for context

If the Intric app is not yet present in your tenant’s Enterprise applications, have a user attempt to sign in once so that the app appears, or add it manually by application ID.

Step 2: Configure in Intric

Once admin consent has been granted:

1. Navigate to Admin in the main menu
2. Go to Integrations in the admin panel
3. Find and select Outlook from the list of available integrations
4. Enable the integration

Users will then see the Outlook integration available in My Integrations and can connect their own Microsoft accounts individually.

Revoking access

To remove admin consent (prevents all users from using the integration):

1. Go to https://entra.microsoft.com
2. Navigate to Identity → Applications → Enterprise applications → Intric
3. Go to Permissions and remove the consent grant for the Outlook-specific permissions

Users who have already connected their accounts will lose access immediately.

To revoke a single user’s access, the user can disconnect from My Integrations. An admin can also revoke the token from the Entra admin center under the user’s profile → Applications.

For the end-user guide, see Outlook.