β Supported Microsoft 365 Licenses
This setup is supported on the following Microsoft 365 and Exchange Online license plans:
Exchange Online (Plan 1)
Exchange Online (Plan 2)
Microsoft 365 Business Standard
Microsoft 365 E1
Microsoft 365 E3
Microsoft 365 E5
Microsoft 365 A1
Microsoft 365 A3
Microsoft 365 A5
Overview
The Layer uses a modern enterprise application model for Microsoft 365 integrations, leveraging Microsoft Graph API. This means that all users who need access to the integration must have appropriate licenses under their Microsoft 365 tenant. The previous method of using a single impersonation account for broad access is no longer supported. Instead, permissions are granted directly to the application via Azure AD.
Itβs important to note that licensing is user-based. Simply licensing one admin or impersonation account is not sufficient; each user requiring access must be appropriately licensed. This guide will walk you through the steps required to grant admin consent for Microsoft Graph integration, ensuring your email integration functions correctly within The Layer.
π Steps for Admins
1. Log in to The Layer
Use your own credentials to access The Layer as an administrator.
2. Navigate to Graph Admin Consent
Click on the provided link: Graph Admin Consent
OR Navigate to: Settings > Mail Agents > Graph Admin Consent
β
3. Add a New Configuration
4. Grant Admin Consent
Click Give Consent and log in with your Microsoft 365 Global Admin credentials.
When prompted, grant Admin Consent to allow necessary permissions.
5. Finalise the Process
Return to All Mail Agents in The Layer.
Click Reset on the left-hand side of the screen.
β οΈ Important Notes
This process must be performed by a Microsoft 365 Global Admin for your tenant.
No additional changes are required beyond these steps.
Once completed, your email integration will continue functioning as expected.
For further assistance, please contact support.
π Context: Understanding Mail Agents
Mail Agents hold the credentials and settings of an external email account, either Microsoft Exchange or SMTP. These agents are configured within The Layer to send emails as if sent from a user's account. Users can configure their default mail agent in their User Settings page.
The Mail Agents area under Settings allows administrators to manage the mail agents used by user and maintenance accounts within The Layer.
Creating a Mail Agent
Click New Mail Agent on the left sidebar.
Enter the From Name and From Address.
Select the type of agent: Microsoft Exchange or SMTP.
Configure the relevant options based on the selected agent type.
Save the configuration.
Mail Agent Types
Microsoft Exchange: Supports Exchange Triage, Exchange Case Sweep, Exchange Archive, and Exchange Calendar synchronization.
SMTP: Used for standard email sending via external SMTP servers.
π Old Method (For Reference)
Previously, The Layer supported a model where a single impersonation account could be used to authenticate all users. While this approach worked for basic configurations, it is no longer supported under the new enterprise application model.