Outlook Web Add-in Permissions

Article ID: 2445

Last updated: 06 Dec, 2023

Recent versions of the Outlook Web Add-in utilize the Graph API in order to communicate with mailbox items. When deploying or installing the Outlook Web Add-in for Riva Insight, you will be asked to grant mailbox permissions, allowing the Web Add-in to use Graph to access mail items for use within Riva Insight.

Permission	Description	Use within Riva Insight
openid	Allows users to sign in to the app with their work or school accounts and allows the app to see basic user profile information.	Required to allow Riva Insight to authenticate to the Graph API and identify the user logged into the Outlook mailbox.
User.Read	Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.
offline_access	Allows the app to see and update the data you gave it access to, even when users are not currently using the app. This does not give the app any additional permissions.
profile	Allows the app to see your users' basic profile (e.g., name, picture, user name, email address)
email	Allows the app to read your users' primary email address
Calendars.ReadWrite.Shared*¹	Allows the app to create, read, update and delete events in all calendars in the organization user has permissions to access. This includes delegate and shared calendars.	Read access allow Riva Insight to obtain information from a meeting in order obtain the list of meeting attendees and get the current track and sync status. Also used to show the schedule within My Day. Write access allow Riva Insight to stamp the meeting with Track in CRM information so that Riva Sync can sync the calendar to CRM.
Mail.ReadWrite.Shared¹	Allows the app to create, read, update and delete events in all calendars in the organization user has permissions to access. This includes delegate and shared calendars.	Read access allow Riva Insight to obtain information from the email in order obtain the list of email recipient and get the current track and sync status. Write access allow Riva Insight to stamp the email with Track in CRM information so that Riva Sync can sync the calendar to CRM.
Mail.Send.Shared¹	Allows the app to send mail as the signed-in user, including sending on-behalf of others.	Used by Track in CRM for tracking and sending an email.

1. The "Shared" permission allows access to mailitems in a delegate or shared mailbox. The permission does not grant any additional permission to those mailboxes that the user does not already have.

This article was: Helpful | Not helpful

Report an issue

Article ID: 2445

Last updated: 06 Dec, 2023

Revision: 3

Comments: 0

« Riva Insight Manifest Generator to obtain the URL to install the...

Install Riva Insight On-Premise »