Microsoft Graph API access is required for ExtendSync, whether or not your organization uses Autopilot. A Microsoft 365 admin must grant consent for the correct tenant. The steps depend on your subscription type and how you plan to use Autopilot.
Choose the Option That Applies to You
Select the scenario that matches your setup to jump to the correct instructions:
Autopilot is already enabled for my organization
If your organization has already enabled Autopilot, you've already granted consent to the Microsoft APIs. No further action is required.
You may still want to confirm that all other prerequisites are met before using ExtendSync.
I want to enable Autopilot for my organization
When you configure Autopilot for your organization, you also grant the required Microsoft Graph API permissions.
Follow the Admin: Enable Autopilot for Emails setup guide.
I want to enable Autopilot for a certain group within my organization
If you want to limit which users’ mailboxes Autopilot can access, follow the Microsoft configuration steps in FAQ: Configuring Application Permissions Restriction in Microsoft Exchange Online.
I don't want to enable Autopilot but still need to grant Microsoft API access
Even if your organization does not plan to use Autopilot, granting Microsoft API access is still required for ExtendSync to function properly.
Sign in to the CloudExtend Admin Portal.
Select your subscription and open the Configuration tab.
In Configure Status, click Configure/Re-configure.
Click Grant/Re-Grant.
Have a Microsoft 365 admin review the requested Microsoft Graph permissions and click Accept.
➡️ See Full Guide: Troubleshooting: Microsoft Grant needs to be given by your CloudExtend admin for the related consent steps.
After consent is granted, users should sign in to the ExtendSync add-in at least once and create a NetSuite connection in the app.
I am a Group Edition user and I want to grant Microsoft API access
Granting Microsoft API access is available in the newly added Accounts section of your subscription in the subscription portal. The following steps should be followed by an admin to grant consent.
Sign in to the CloudExtend Admin Portal.
Select your subscription and open the Configuration tab.
In Configure Status, click Configure/Re-configure.
Click Grant/Re-Grant.
Have a Microsoft 365 admin review the requested Microsoft Graph permissions and click Accept.
Once consent has been granted, you will be returned to the portal and should see a green checkmark next to Microsoft Grant Admin Consent.
Troubleshooting Consent Status
The portal does not show Success
Sign in to the CloudExtend Admin Portal using an email address with the same domain as the Microsoft 365 account granting consent, or an alias for that domain.
If consent was granted successfully but the portal user signs in with a different domain, the status indicator may not appear.
For example, an outsourced consultant may manage the subscription using their own company’s email domain. In this case, the missing indicator may not mean consent failed.
If You're Not the Microsoft 365 Admin:
A Microsoft 365 admin must complete the consent step. You can either:
Ask the admin to join your session and click Sign In on the consent screen.
Copy the authorization URL from the browser and send it to the admin. They must complete authorization within five minutes.
Need Help?
If you've gathered the log files but still need assistance, we're happy to help.
💬 Chat with us - Click the chat icon at the bottom-right of this page.
📧 Email: cloudextend-support@celigo.com
Please include:
A brief description of the issue
Screenshots
The more detail you share, the faster we can help resolve the issue.