• Setting up an O365 service account and permissions
  • Setting up Envoy Rooms on the Dashboard

We support an alternative authentication flow that allows us to read and write resources on behalf of a user. The technical details are explained in this document.

https://docs.microsoft.com/en-us/graph/auth-v2-user

Authentication as a service allows Envoy to access all rooms’ calendar automatically. For customers who want to grant Envoy Rooms access to selected rooms’ calendar, we recommend you choose authentication as a user as described in this document.

Please make the changes in Microsoft 365 admin center before setting up Envoy Rooms on Envoy Dashboard.

Setting up O365 service account and permissions

Service account

We recommend you create a dedicated account for Envoy Rooms. This service account will not have access to any room calendars by default. The Global admin within O365 will need to grant access on a per-calendar basis.

Please create the service account as an O365 Global Admin in order to authorize the following API scopes:

  • Offline_access
  • Calendars.ReadWrite.Shared
  • Place.Read.All

Note: Place.Read.All requires a Global Administrator to grant permissions.

More information about permissions

https://docs.microsoft.com/en-us/graph/permissions-reference#delegated-permissions-40

Grant access to a room’s calendar

  1. Navigate to Exchange in the admin center

https://admin.microsoft.com/Adminportal/Home?source=applauncher#/users#%2F

2. Find the room to be managed by Envoy Rooms and Click the pen icon to edit the resource

3. Add the service account to Full Access by clicking the + button

4. Click Save. It will look like this:

Setting up Envoy Rooms on the Dashboard

Note: In our testing, the Delegate Access took 2 days to propagate on Microsoft Exchange. We recommend waiting for 2 days before Step 2.

  1. Connect the service account to Envoy Rooms

Please make sure you log in as the service account before clicking this link on the Dashboard.

Did this answer your question?