Skip to main content

O365 Email & Calendar Integration - Admin "Needs Approval"

Lisa Burkey avatar
Written by Lisa Burkey
Updated over a week ago

What feature does this relate to?

This article discusses a change to how users connect their Office 365 email within Truss:

How does Truss's Office 365 Email Integration Work?

Truss uses a secure Oauth 2.0 connection to send email from the connected user's O365 or Exchange Online mailbox via Microsoft's Graph API.

What changed?

Starting in late October 2025, Microsoft changed their default Administrator Consent policy for all third-party applications that utilize their Graph API. You can read Microsoft's announcement here, and here.

The default consent policy now requires Office 365 Administrators to grant consent to any third-party applications using the email API (more on what that means below).

Due to this change, users may be prompted for admin approval while connecting their Email via our integration:

If you see the above while connecting, this requires the firm's IT Administrator to grant consent to use this app at their organization.

How to grant consent

Your IT administrator needs to grant admin consent to the Truss application, inside your O365 cloud environment. This can be granted once for all users and does not need to be done per user.

Before proceeding, the IT administrator must have the Global Administrator role within Azure, to grant admin consent.

We provide steps below, though recognize that the steps might be slightly different depending on your Office 365 configuration.

  1. Have your IT administrator log into your O365 https://portal.azure.com

  2. Go to "Enterprise applications" -> "Truss O365" -> Security -> Permissions

  3. Click "Grant admin consent for gettruss.io" (see screenshot below):

You will be prompted to log in - please ensure you log in with an account that has Global Administrator access on your tenant.

Review the list of permissions and click "Accept":

After accepting, users should be able to go into Truss and connect their email & calendar integration within Truss.

Troubleshooting

I've granted Admin Consent, but I'm still seeing issues

  1. Inside Azure portal go to "Enterprise Applications" -> Security -> Consent and Permissions

  2. Review "User consent settings", it should look something like this:

  3. Also review your "Admin consent settings", it should look something like this:

Depending on your configuration, you may need to adjust some of the settings above. After you've done that, try to Grant Administrator consent again.

If you continue to see the "Needs Approval" prompt even after your IT administrator has followed the above steps

Go to your Truss Integration settings, at the very bottom you'll see the following setting:

Check this box and try connecting again.

References:

Did this answer your question?