2.3 SETTING UP SECURITY

iGlobe CRM is an App made for Microsoft Teams and is tightly integrated to Microsoft 365 services, for example the Planner, Groups and Outlook. Using the Microsoft Graph API.  This integration requires admin consent before the app can be fully used across users in the organization.

 

The process of approving the application for the whole organization by the administrator is referred to as admin consent and is a part of the Azure AD OAuth implementation.

 

The framework is based on a user or an administrator giving consent to an application that asks to be registered in their directory.  A user can give access only to apps they own that access their Microsoft 365 information. They can't give an app access to any other user’s information. There are two kinds of permissions that are used when using Integrated Apps in Office 365:
 

1. user permissions and

2. admin permissions.

 

When an admin registers an app for all users in their organization, he or she is asked for permission to let that app access information and resources in their organization. After this, when other users in the organization use that app, they won’t be asked for permission. When an admin registers an app, that admin must make sure that they trust that app's publisher.