Skip to main content
Admin Portal: Grant Microsoft API Access

ExtendSync Outlook | How to grant Microsoft API access

Updated over 3 months ago

Prior to October 25, 2023, granting Microsoft API access was only required for organizations wishing to enable ExtendSync Autopilot functionality.

Post October 25th, 2023, granting Microsoft API access is required for all organizations.

Choose one of the options below to skip directly to the necessary step.

Autopilot is already enabled for my organization

If you've already enabled Autopilot this means you've already granted consent to Microsoft API's and no further action is required (you may want to check that you've met other prerequisites here before using ExtendSync).

I want to enable Autopilot for my organization

For detailed instructions on enabling Autopilot and granting access for your organization click here. By enabling Autopilot, you will also be granting the API access.

I want to enable Autopilot for certain group within my organization

See instructions on how to push out Graph API to certain groups within your organization here.

I don't want to enable Autopilot but still need to grant Microsoft API access

Granting Microsoft API access is available in the Accounts section of your subscription in subscription portal under the Default Settings section. The following steps should be followed by an admin to grant consent.

  1. The ExtendSync admin should log in to the subscription portal (subscriptions.cloudextend.io)

  2. Locate your subscription and click on Accounts.

  3. In Default Settings section, you would see Microsoft Grant Admin Consent. You can grant the consent there.

  4. On the next screen, the Microsoft 365 Admin is required to allow ExtendSync to use the Microsoft Graph API. You can review the permissions and click Accept.

Once consent has been granted you will be returned to the portal and should see a green checkmark next to Microsoft Grant Admin Consent. If your Microsoft 365 Admin had to grant access remotely you may need to refresh your browser to see the green checkmark.

I am a Group Edition user and I want to grant Microsoft API access

Granting Microsoft API access is available in the newly added Accounts section of your subscription in subscription portal. The following steps should be followed by an admin to grant consent.

  1. The ExtendSync admin should log in to the subscription portal (subscriptions.cloudextend.io)

  2. Locate your subscription and click on Accounts.

  3. In Default Settings section, you would see Microsoft Grant Admin Consent. You can grant the consent there.

  4. On the next screen, the Microsoft 365 Admin is required to allow ExtendSync to use the Microsoft Graph API. You can review the permissions and click Accept.

Once consent has been granted you will be returned to the portal and should see a green checkmark next to Microsoft Grant Admin Consent. If your Microsoft 365 Admin had to grant access remotely you may need to refresh your browser to see the green checkmark.

💡 Note, if you are not the Microsoft 365 Admin see Troubleshooting Step below.

⚠️ Troubleshooting

  • If you are not getting a green checkmark please be sure that

    • You are logging in to the subscription portal with the same email domain (or an alias for the domain) as the Microsoft 365 account you are granting consent.

    • If consent was previously granted by the Microsoft 365 admin and you are logging in with a different email domain the checkmark will not appear. In this case, the lack of a checkmark can be ignored. An example of this scenario would be an outsourced consultant who has been granted access to the portal to manage licenses for your organization. When the consultant logins in with their own domain the green checkmark will not appear since the check is being done for their domain.

  • If you're not the Microsoft 365 admin you will see a screen similar to the one below. You can either have your admin join you via a screen share and have them click the Sign In link or you can copy the URL in the browser window of the authorization screen and email that to your admin. They must authorize within 5 minutes.

Did this answer your question?