Skip to main content

O365 self service integration guide

Connect Microsoft Office 365 (O365) to Grata Intelligence. Use email, calendar, and user profile information in Blueflame.

C
Written by Caleb Musselman

An administrator prepares access. Each user then connects their own Microsoft account and tests the connection.

Before you start

Before users connect, an administrator must have:

  • Entra ID (Azure AD) admin access.

  • Permission to manage Enterprise Applications in Azure.

  • A provisioned Blueflame environment.

Admin consent is required before users can connect. Each user must connect their own Office 365 account. Microsoft 365 access permissions apply to that user. Some environments require admin approval for each consent step.

Connect Office 365

Grant admin consent

  1. Open the Office 365 admin consent link.

  2. Sign in with an admin account.

  3. Review and approve the requested permissions.

A redirect error can appear after consent. This error is expected. Continue with user assignment.

Assign users to the application

  1. Open the Azure Admin Portal.

  2. Go to Enterprise Applications → BlueFlame AI.

  3. Select Users and Groups.

  4. Add the All Users group, or the specific users and groups that need access.

Complete user consent

  1. Open the consent link for your Blueflame environment:

  2. Sign in and complete the consent flow.

  3. If admin approval is requested, ask an administrator to approve access.

  4. If the consent screen shows Consent on behalf of your organisation, select that option.

Connect your Microsoft account

Each user must complete these steps individually.

  1. In Grata, open your account menu and select Connections.

  2. Select Agent Connections.

  3. Under Office 365, select Connect.

  4. Complete the authorization flow for your Microsoft account.

Test the connection

  1. Open a chat in Grata.

  2. Enter this prompt:

    @O365 Summarize all the emails I received over the last 12 hours

  3. Confirm that Blueflame returns a response.

Office 365 permission reference

Status

Permission

Purpose

Example use

SSO

User.Read

Sign in and read the user profile.

SSO login to Blueflame.

SSO

offline_access

Maintain access when the user is offline.

Scheduled Blueprint runs.

Unused

Chat.Read

Read one-to-one and group chat messages.

Teams integration.

Unused

Tasks.ReadWrite

Manage tasks and task lists.

Read or create to-dos.

Active

Calendars.Read.Shared

View the user's calendars and shared calendars.

Prepare for the next meeting.

Active

Calendars.ReadWrite

Manage calendar events.

Create a meeting request.

Active

Contacts.ReadWrite

Manage contacts.

Get contact information for searches.

Active

Files.ReadWrite.All

Manage files the user can access.

SharePoint integration and file loads.

Active

Mail.ReadWrite

View, create, edit, and delete email. This permission does not permit sending email.

Summarize email or create a draft.

Active

Mail.Read.Shared

Read shared mailboxes.

Search shared inbox email.

Active

Notes.Read.All

Read OneNote notebooks.

OneNote integration.

Active

People.Read

Read the relevant people list.

Show an agenda with people profiles.

Active

User.ReadBasic.All

Read basic organization user profiles.

Find contacts for email or invitations.

Get help

If you cannot connect, ask your administrator to check admin consent, application assignment, and any additional consent approval required by your Microsoft environment.

Did this answer your question?