Why can’t I add my Microsoft 365 account to Public Address?
The Public Address application requires access to be able to perform certain actions in your email account in order to provide the full benefit of a premium subscription. Microsoft refers to these actions as ‘scopes,’ for example, when you first connect your Microsoft account we request access be able to send email from your email account, inside the Public Address application.
Some of these scopes require your administrator to approve access, and until your IT administrator approves this access, you won’t be able to use Public Address to send emails from your email account. This is why you’re receiving a message asking you to contact your IT administrator.
There’s three ways that your IT administrator can rectify this problem, and we’ve included all options below for your IT administrators to help them in whitelisting our application and some more information about how we securely manage your data.
Information for IT administrators
To ensure the integrity of your data, we only request access to the following scopes:
- Mail.Send, in order to be able to send emails on your user’s behalf and create tracking data on opens and engagements with links
- Mail.ReadWrite, in order to be able to use the messageid associated with the message we have sent on your user’s behalf to locate replies to this message and filter thes einto the platform
- Contacts.Read, in order to enable your users to email their contacts from the platform
When we access your user’s mailbox, we will only ever access emails via the threadid, which identifies emails which have been sent via our platform.
Use the Public Address consent URI
Following the consent process below will allow your users to individually connect to the Public Address application. Please note that this must be completed by a user with admin privileges for your account.
Allow your users to consent to access
You can allow your users to consent to access to external applications:
- In the admin center, go to the Settings > Org settings > Services page, and then select User consent to apps.
- On the User consent to apps page, select the option to turn user consent on or off.
The user will now be able to sign in to Public Address. You can view a Microsoft Help centre article here: https://docs.microsoft.com/en-us/microsoft-365/admin/misc/integrated-apps?view=o365-worldwide
Use a consent flow to grant user access
Azure Active Directory allows for you to grant permission for users to access certain applications. When you configure this workflow you will be notified that a user has requested access to Public Address.
The instructions below reference how to grant users permission to request access:
- Sign in to the Azure portal as a global administrator.
- Click All services at the top of the left-hand navigation menu. The Azure Active Directory Extension opens.
- In the filter search box, type “Azure Active Directory” and select the Azure Active Directory item.
- From the navigation menu, click Enterprise applications.
- Under Manage, select User settings.
- Under Admin consent requests (Preview), set Users can request admin consent to apps they are unable to consent to to Yes.
The Microsoft help article here steps you through this process: https://docs.microsoft.com/en-GB/azure/active-directory/manage-apps/configure-admin-consent-workflow