Assign account permissions
The first step is to assign account permissions to the service account to allow it to provide Rooms access to the calendars. The permissions required are presented somewhat differently in the Azure Active Directory views.
These are the permissions Rooms needs to function:
The service account needs the corresponding permissions to be able to access the calendars as Rooms.
Configuration:
Open up the Microsoft Azure admin portal as a Global Administrator: https://portal.azure.com/
Open the Azure Active Directory service page
From the Users panel select the new service account. You’ll be using an existing user in your O365 tenant.
In the Assigned roles view add the following assignments - note it typically takes a few seconds for an assigned attribute to appear as set:
Attribute assignment administrator
Attribute assignment reader
Cloud application administrator
Reports reader
Delegate access to the service account
Navigate to Exchange in the admin center
Find the room to be managed by Envoy Rooms and click the room to edit the resource
Click Edit under "Read and Manage (Full Access)"
Add the service account to Full Access by clicking "Add members"
Setting up Envoy Rooms on the Dashboard
Please make sure you log in as the service account before connecting the calendar to Envoy.
Delegate Access can take up to 2 days to propagate on Microsoft Exchange
Connect the service account to Envoy Rooms.
Permissions we ask for when using this method: