# Microsoft Permissions

## When signing up for Relay.app using a Microsoft account, it tells me admin approval is required. Now what?

Administrators in a Microsoft workspace can restrict signing in to apps that they haven't previously approved. As a result, non-admin users of the workspace will see a dialog like this when trying to sign in to Relay.app:

<div align="center"><figure><img src="/files/4cIYQbtpZNu0J6SaneY8" alt="Microsoft sign-in error dialog showing &#x27;Need admin approval&#x27; message with Relay.app requesting permissions" width="292"><figcaption><p>"Unverified" error during sign in with Microsoft</p></figcaption></figure></div>

This means that **an admin in your workspace will need to approve Relay.app**. Luckily, this is easy:

### Approving Relay.app for admins

Admins have two ways to approve Relay.app for users in their workspace:

1. If a user requests Relay.app approval via the dialog above, admins will see the request in their admin panel, ready to approve.
2. Admins may also sign in to Relay.app themselves and check the box to **Consent on behalf of your organization**.

<div align="center"><figure><img src="/files/fRuCm7wwsq34JYlBjQZV" alt="Microsoft permissions consent dialog showing &#x27;Consent on behalf of your organization&#x27; checkbox for admin approval" width="272"><figcaption><p>Admins see "Consent on behalf of your organization"</p></figcaption></figure></div>

### Requested & required permissions

If you're an admin managing permissions in Entra, your permissions screen will look like this when all Microsoft apps are approved for use with Relay.app:

<figure><img src="/files/lxYUur9kj39xmmczyXOY" alt="Microsoft Entra admin center showing Enterprise applications with Relay.app permissions and all Microsoft app permissions listed"><figcaption></figcaption></figure>

If your organization only wants to use Outlook with Relay.app, the required permissions are:

* Mail.ReadWrite
* Mail.Send
* User.Read
* openid
* email
* profile
* offline\_access

{% hint style="info" %}
Need to correct which permissions are granted? Make corrections in Entra, or delete Relay.app from Entra and sign in to Relay.app again to grant permissions during sign-in.
{% endhint %}

### Learn more

Visit this Microsoft support article for more information:

<https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/review-admin-consent-requests>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.relay.app/app-specific-faqs/microsoft-permissions.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.