Accessing all functionality requires global authorization
The Xakia Outlook O365 Add-In provides you with powerful functionality to create and manage matters and to file and store emails and documents to your document repository in Xakia or SharePoint.
To provide this functionality, the Xakia O365 Outlook Add-In uses a delegated authentication mechanism when accessing email and attachment content from the logged in users’ inbox. This delegated authentication approach is ideal in that it only grants Xakia permission to the inboxes that belong to the authenticated users.
How to pre-authorise the new Xakia O365 Outlook Add-in:
In the Azure portal log in as a user with Global Administrator privileges
Open ‘Microsoft Entra’
Select ‘Enterprise Applications’
Use the search box to locate the app called ‘Xakia O365 Outlook Add-In’ and select it. If the app called ‘Xakia O365 Outlook Add-In’ isn’t shown in the ‘Enterprise Applications’ for your tenant, you can use this link to add it. (This is a Microsoft domain. This will prompt you to log in with credentials of a Global Administrator in your Entra/Azure instance)
Click on the ‘Permissions’ menu item
Click the large blue button labelled ‘Grant admin consent for <your organization>’
Required Permissions
The following permissions are required by the Xakia O365 Outlook Add-In App.
Mail.ReadWrite (Delegated): The Xakia O365 Outlook Add-In uses this permission to fetch email and attachments from your mailbox and file it to Xakia. The Write portion of the permission is used to apply a filing indicator category to emails in your inbox, so users can easily tell which items have been filed and which have not
Mail.ReadWrite.Shared (Delegated): Similar to the above, however this permission is used for shared mailboxes
offline_access (Delegated): This is used to maintain a session even after the user has closed the add-in, so that we can continue to automatically file replies for auto-filed conversations to Xakia in the background. Note the session only lasts for approx. 1 hour
openid, profile and User.Read (Delegated): Used to allow users to sign in using the app and obtain the signed in users email address
Note that all permissions are Delegated, there are no Application level permissions used. This means that even admin consent is used to grant access to all users in your tenant, Xakia can not access any mail in your tenant for any user who doesn't use the Xakia O365 Outlook Add-In.
Important! The Xakia O365 Outlook Add-In does not create or send emails on a user’s behalf.
