Applies to: Calendar E-Mail Extension for Office 365/SharePoint online
This article describes how to configure a user account and use this account/mailbox to send and handle emails using the Calendar Email Extension app.
In this article:In the Calendar Email Extension app you first have to configure the ‘E-Mail settings’. If you choose the 3rd option – Send invitations, check availability and book resources, you have to authorize a user account.
Before you can do this, you have to create the user account.
Create a user account
Please note that during the trial you can also use your own account. In production, please use a designated user account.
Open the Office 365 Admin Portal – https://portal.office.com, open Active users and click on ‘Add a user’.
Now you can enter the email address of this user account and click on ‘Authorize’ in the app settings.
You now have to enter the accounts password and consent that the account gets access to Office 365 resources.
If the consent is successful, you can continue with the app configurations and use the user account to send and receive emails.
Possible Issues
If you receive the following message instead of the consent page, there are a few more things you have to do.
You see this message, because users cannot consent to apps accessing company data on their behalf. This is a configuration in Azure Active Directory (Azure Active Directory/Users and Groups/User Settings).
If you change this option to Yes, you should be able to consent that the account gets access to Office 365 resources (it can take a few minutes after changing this settings in Azure AD).
If changing this setting in Azure AD is not possible for you, you have to give the account the permissions manually.
This is quite complicated, but here is a detailed instruction using the graph explorer https://graphexplorer.azurewebsites.net/:
- Continue as an administrator
On the error screen, click on ‘Have an admin account? Sign in with that account, enter the admin account credentials and continue with the consent.
This will allow the admin account to access the Office 365 resources using the Calendar Email Extension app. Now we have to give the same permissions to the user account.
- Get object ids in Azure Active Directory
To be able to give the user account the permissions we first need the object id of the app and the object id of the account in Azure Activate Directory.
Object Id of the app:
Open Azure AD, Enterprise applications, All applications, look for ‘SharePoint|sapiens Calendar Email Extension for Office 365’ and copy the object id.
Object Id of the user:
In Azure AD, Users and groups, All users, look for the user account, click on it and copy the object id.
- Open Graph Explorer and Login
Open https://graphexplorer.azurewebsites.net/ and click on Login.
- Look for the existing app permissions
In the Graph Explorer openhttps://graph.windows.net/myorganization/oauth2PermissionGrants?$filter=clientId eq '<app object id>'
and replacewith the object id of the app you copied in step 2. In my case it’s
https://graph.windows.net/myorganization/oauth2PermissionGrants?%24filter=clientId%20eq%20'1564f295-a308-4b73-b9d7-c15cbce5ed91'
This should return 3 entries:
- Change the permission JSON:
Now copy the 3 entries into a notepad and replace the principalId with the object id of the account you copied in step 2.
- Use the graph explorer to add user permissions
In Graph Explorer change the method to POST, use the URLhttps://graph.windows.net/myorganization/oauth2PermissionGrants
and copy the first JSON part from Step 5 to the graph explorer and click on Go:Repeat the same with the other two JSON parts from Step 5.
- Go back to the app settings, click on Authorize and enter the account’s credentials.
That’s it. You can now continue with the app settings and use the user account to send and receive emails.