Skip to main content

Connecting Outlook (Microsoft 365) when your organization requires admin consent

How to connect Outlook (Microsoft 365) export when your Microsoft Entra tenant requires admin consent, and how to ensure drafts are saved to the correct user's mailbox instead of the administrator's.

Written by Marina Krivenets

If your Microsoft Entra tenant requires administrator approval, connecting Outlook export in Stripo can show a "Need admin approval" screen.

In some setups, the administrator signs in to approve, and the exported drafts are then created in their mailbox instead of the intended user's. This article explains why that happens and how to set it up correctly.

Symptoms

  • A user sees a "Need admin approval" prompt when connecting Outlook.

  • After an administrator approves by signing in, drafts appear in the administrator's Drafts folder, not the intended user's mailbox.

Cause

Two separate things are at play:

  1. Tenant policy. Your Microsoft Entra tenant requires admin consent for the permissions the integration uses (offline_access, User.Read, Mail.ReadWrite). This is controlled on your Microsoft side, not in Stripo.

  2. Connection ownership. An Outlook connection stores one token, tied to whichever account completed the sign-in. If the administrator completes the sign-in, the drafts follow the administrator's account.

Solution

Step 1. Grant admin consent through a dedicated consent link.

A Global Administrator or Cloud Application Administrator opens the admin-consent link and approves on behalf of the organization:

https://login.microsoftonline.com/organizations/v2.0/adminconsent?client_id=e9788dd3-a224-4410-99c1-bfe484882f13&redirect_uri=https%3A%2F%2Fmy.stripo.email%2Fcabinet%2Fexportservice%2Fv1%2Foutlookweb.html&prompt=select_account&scope=offline_access%20user.read%20mail.readwrite

This link only grants consent. It does not create a connection, so nothing is tied to the administrator's mailbox. Your support contact can provide the exact link for your account.

Step 2. The user creates their own connection.

Once consent is granted, regular users no longer see the "Need admin approval" prompt. The person who will send emails opens Stripo, creates the Outlook connection, and signs in with their own Microsoft account. Their token is stored for the connection, so drafts are created in their mailbox.

Important

  • The administrator should only grant consent, not complete or save a connection in Stripo. Completing the connection under the administrator account is what causes drafts to land in the administrator's mailbox.

  • Each member's email in Stripo should match their Microsoft account email.

  • Permissions requested: offline_access, User.Read, Mail.ReadWrite.


Did this answer your question?