Skip to main content
All CollectionsOffice 365 Integration
Microsoft 365 Licensing and Configuration Guide
Microsoft 365 Licensing and Configuration Guide

Granting Admin Consent for Graph Integration

C
Written by Chris Smith
Updated today

βœ… Supported Microsoft 365 Licenses

This setup is supported on the following Microsoft 365 and Exchange Online license plans:

  • Exchange Online (Plan 1)

  • Exchange Online (Plan 2)

  • Microsoft 365 Business Standard

  • Microsoft 365 E1

  • Microsoft 365 E3

  • Microsoft 365 E5

  • Microsoft 365 A1

  • Microsoft 365 A3

  • Microsoft 365 A5


Overview

The Layer uses a modern enterprise application model for Microsoft 365 integrations, leveraging Microsoft Graph API. This means that all users who need access to the integration must have appropriate licenses under their Microsoft 365 tenant. The previous method of using a single impersonation account for broad access is no longer supported. Instead, permissions are granted directly to the application via Azure AD.

It’s important to note that licensing is user-based. Simply licensing one admin or impersonation account is not sufficient; each user requiring access must be appropriately licensed. This guide will walk you through the steps required to grant admin consent for Microsoft Graph integration, ensuring your email integration functions correctly within The Layer.


πŸ“Œ Steps for Admins

1. Log in to The Layer

  • Use your own credentials to access The Layer as an administrator.

2. Navigate to Graph Admin Consent

  • Click on the provided link: Graph Admin Consent

  • OR Navigate to: Settings > Mail Agents > Graph Admin Consent
    ​

3. Add a New Configuration

  • Click on the Add New button.

  • Enter your organisation's Email Domain in the required field.
    ​

4. Grant Admin Consent

  • Click Give Consent and log in with your Microsoft 365 Global Admin credentials.

  • When prompted, grant Admin Consent to allow necessary permissions.

5. Finalise the Process

  • Return to All Mail Agents in The Layer.

  • Click Reset on the left-hand side of the screen.


⚠️ Important Notes

  • This process must be performed by a Microsoft 365 Global Admin for your tenant.

  • No additional changes are required beyond these steps.

  • Once completed, your email integration will continue functioning as expected.

For further assistance, please contact support.


πŸ“– Context: Understanding Mail Agents

Mail Agents hold the credentials and settings of an external email account, either Microsoft Exchange or SMTP. These agents are configured within The Layer to send emails as if sent from a user's account. Users can configure their default mail agent in their User Settings page.

The Mail Agents area under Settings allows administrators to manage the mail agents used by user and maintenance accounts within The Layer.

Creating a Mail Agent

  1. Click New Mail Agent on the left sidebar.

  2. Enter the From Name and From Address.

  3. Select the type of agent: Microsoft Exchange or SMTP.

  4. Configure the relevant options based on the selected agent type.

  5. Save the configuration.

Mail Agent Types

  • Microsoft Exchange: Supports Exchange Triage, Exchange Case Sweep, Exchange Archive, and Exchange Calendar synchronization.

  • SMTP: Used for standard email sending via external SMTP servers.


🌟 Old Method (For Reference)

Previously, The Layer supported a model where a single impersonation account could be used to authenticate all users. While this approach worked for basic configurations, it is no longer supported under the new enterprise application model.

Did this answer your question?