Outlook Mail is the cloud email product offered by Microsoft as part of Microsoft 365.
Worklytics supports connecting to Outlook Mail to analyze how people are collaborating via email in your organization.
To support this, Worklytics Outlook Mail connectors request the following permissions grants:
Contacts.Read used to understand external collaborators, or link email accounts not in your user directory to their proper owners.
Group.Read.All used to disambiguate mailing lists. (eg, when someone emails everyone@acme.com, if that's a mailing list in the Acme organization, we can understand the group of people the email went to)
Mail.Read / Mail.Read.Basic allows Worklytics to read all emails from all mailboxes in your organization. The latter permission is supported by the "beta" version of the Microsoft Graph API, and Worklytics is offering an equivalent "beta" Connector. While we only store and process metadata about email messages in either case, the "Mail.Read.Basic" permission explicitly restricts our access to only metadata about your emails (eg, not the body / attachments).
MailboxSettings.Read provides user timezone preferences, working hours, etc that are used in Worklytics' analysis.
User.Read.All to iterate users mailboxes and links Office 365 accounts with other data sources, Worklytics uses user information from your user directory.
openid the OpenId protocol is used for the initial connection flow, to pass basic profile information about the person connecting the data source back to the Worklytics application.
Further reading: Microsoft Graph Permissions Reference
Your organization must already have a provisioned Worklytics account to use this connector.
A Global Administrator of your Entra ID instance must complete the following steps:
Visit the Data Connections screen inside Worklytics, and find the "Outlook Mail" connector. Click "Connect".
A screen to authenticate with Microsoft will open in a new tab.
After authenticating with the Entra ID organization that you wish to connect, you'll be presented with a permissions screens that looks as follows. Click "Accept".
You'll be redirected back to Worklytics.
Your organization must already have a provisioned Worklytics account to use this connector.
A Global Administrator of your Entra ID instance must complete the following steps:
Visit the Data Connections screen inside Worklytics, and find the "Outlook Mail - Meta Data Only" connector. Click "Connect".
After authenticating with the Entra ID organization that you wish to connect, you'll be presented with a permissions screens that looks as follows. Click "Accept".
You'll be redirected back to Worklytics.
A screen to authenticate with Microsoft will open in a new tab.
