How to Grant Microsoft Graph API Permissions to an App in Microsoft Entra ID (Azure AD)
Please pass this guide to your IT team or Microsoft Entra (Azure AD) administrator.
Required Permissions:
The following Microsoft Graph permissions need to be granted to the Stax.AI
Mail.ReadWrite |
Mail.Send |
Calendars.ReadWrite |
Contacts.ReadWrite |
Files.ReadWrite |
User.ReadWrite |
offline_access |
openid |
profile |
Steps to Grant API Permissions in Microsoft Entra ID
Log in to the Azure Portal
Go to: https://portal.azure.com and log in with an administrator account.
Open Microsoft Entra ID
In the left-hand sidebar, search for and select Microsoft Entra ID (formerly Azure Active Directory).
Find the App Registration
Click “App registrations”.
Search for the app by name (or client ID).
Click the app name to open its configuration page.
Navigate to API Permissions
In the app’s left-hand menu, click “API permissions”.
Click “+ Add a permission”.
Add Microsoft Graph Permissions
Select Microsoft Graph.
Choose Delegated permissions
Use the search bar to find and check off each of the following:
Permission Name | Type |
Mail.ReadWrite | Delegated |
Mail.Send | Delegated |
Calendars.ReadWrite | Delegated |
Contacts.ReadWrite | Delegated |
Files.ReadWrite | Delegated |
User.ReadWrite | Delegated |
offline_access | Delegated |
openid | Delegated |
profile | Delegated |
Delegated |
Click on "Add Permissions" once all are selected.
Grant Admin Consent
Back on the "API Permissions" page, click "Grant Admin Consent for [Your Organization]". Confirm when prompted.