As of October 25, 2023, granting Microsoft API access is required for all organizations using ExtendSync — not just those using Autopilot.
📅 Before October 25, 2023:
Only organizations enabling Autopilot needed to grant Microsoft API access.
📅 After October 25, 2023:
All ExtendSync users must grant Microsoft API access, even if Autopilot is not used.
Choose the Option That Applies to You
Select the scenario that matches your setup to jump to the correct instructions:
Autopilot is already enabled for my organization
If your organization has already enabled Autopilot, you’ve already granted consent to the Microsoft APIs — no further action is required.
You may still want to confirm that all other prerequisites are met before using ExtendSync.
I want to enable Autopilot for my organization
If you’re ready to enable Autopilot across your organization, follow our full setup guide:
👉 Click here for detailed instructions.
When you enable Autopilot, you automatically grant the required Microsoft Graph API permissions.
I want to enable Autopilot for certain group within my organization
If you only want to enable Autopilot for specific users or groups, follow these steps to deploy the Microsoft Graph API permissions selectively.
👉 View instructions on how to push out Graph API to certain groups within your organization here.
I don't want to enable Autopilot but still need to grant Microsoft API access
Even if your organization does not plan to use Autopilot, granting Microsoft API access is still required for ExtendSync to function properly.
To grant access:
The ExtendSync admin should log in to the subscription portal (subscriptions.cloudextend.io).
Locate your subscription and click on Accounts.
In Default Settings section, you would see Microsoft Grant Admin Consent. You can grant the consent there.
On the next screen, the Microsoft 365 Admin is required to allow ExtendSync to use the Microsoft Graph API. You can review the permissions and click Accept.
Once consent has been granted you will be returned to the portal and should see a green checkmark next to Microsoft Grant Admin Consent.
If your Microsoft 365 Admin had to grant access remotely you may need to refresh your browser to see the green checkmark.
I am a Group Edition user and I want to grant Microsoft API access
Granting Microsoft API access is available in the newly added Accounts section of your subscription in subscription portal. The following steps should be followed by an admin to grant consent.
The ExtendSync admin should log in to the subscription portal (subscriptions.cloudextend.io)
Locate your subscription and click on Accounts.
In Default Settings section, you would see Microsoft Grant Admin Consent. You can grant the consent there.
On the next screen, the Microsoft 365 Admin is required to allow ExtendSync to use the Microsoft Graph API. You can review the permissions and click Accept.
Once consent has been granted you will be returned to the portal and should see a green checkmark next to Microsoft Grant Admin Consent.
If your Microsoft 365 Admin had to grant access remotely you may need to refresh your browser to see the green checkmark.
Troubleshooting
If you are not getting a green checkmark please be sure that:
You are logging in to the subscription portal with the same email domain (or an alias for the domain) as the Microsoft 365 account you are granting consent.
If consent was previously granted by the Microsoft 365 admin and you are logging in with a different email domain the checkmark will not appear. In this case, the lack of a checkmark can be ignored.
An example of this scenario would be an outsourced consultant who has been granted access to the portal to manage licenses for your organization. When the consultant logins in with their own domain the green checkmark will not appear since the check is being done for their domain.
If You’re Not the Microsoft 365 Admin:
If you’re prompted to sign in but don’t have Microsoft 365 admin rights:
Have your Microsoft 365 Admin join you via screen share and click the Sign In link on the consent screen, or
Copy the authorization URL from your browser and email it to your Microsoft 365 Admin.
They must complete authorization within 5 minutes.
Need Help?
If you’ve gathered the log files but still need assistance, we’re happy to help.
💬 Chat with us — Click the chat icon at the bottom-right of this page.
📧 Email: cloudextend-support@celigo.com
Please include:
A brief description of the issue
Screenshots
The more detail you share, the faster we can help resolve the issue.