To configure Microsoft 365 to allow users to connect to CallPlease Address Books, a system administrator must manage the application’s access through the Microsoft Entra admin center (formerly Azure AD). Because the integration uses OAuth 2.0 and the Microsoft Graph API to synchronize contacts, the administrator’s primary role is ensuring the environment is permitted to grant the necessary permissions.

Here is the professional outline for an M365 Administrator to configure this integration.

1. Verification of Prerequisites

Before technical configuration, ensure your environment meets the licensing and tier requirements:

• CallPlease Subscription: The contact integration feature is only available on Plus or Enterprise license tiers.
• M365 License: Users must have a license that includes Exchange Online (e.g., Business Standard, Business Premium, E3, or E5). Note that some highly restricted “Exchange Only” or “Kiosk” plans may have API limitations.
• Administrator Role: You must be a Global Administrator or a Cloud Application Administrator to manage tenant-wide consent.

2. Configure User Consent Settings

By default, many M365 tenants restrict users from consenting to third-party applications that access data like contacts.

1. Go to the Microsoft Entra admin center.
2. Navigate to Identity > Applications > Enterprise applications > Consent and permissions > User consent settings.
3. Recommended Setting: Select “Allow user consent for apps from verified publishers, for selected permissions.”

• If your policy is stricter, you may need to enable the Admin consent workflow, which allows users to “Request Approval” from you when they try to connect CallPlease.

3. Granting Tenant-Wide Admin Consent (Optional but Recommended)

If you want to bypass the individual consent prompt for all users (or if your security policy blocks user-initiated consent), you can pre-authorize CallPlease for the entire organization.

1. In Enterprise Applications, search for “CallPlease”.
2. If the app does not appear yet (because no one has tried to log in), you may need to have one user (or yourself) attempt the connection via the CallPlease Web App to “trigger” the app registration in your tenant.
3. Once the app appears in the list:

• Select Permissions under the Security section.
• Click Grant admin consent for [Your Organization].
• Review and accept the permissions (see below for specific scopes).

4. Required API Permissions (Scopes)

CallPlease requires specific Delegated Permissions to function. As an expert, you should verify that the application is requesting the following:

• User.Read: Allows the app to sign the user in and read their basic profile.
• Contacts.ReadWrite: Necessary for the “real-time synchronization” to look up, create, and edit contacts in the user’s Outlook address book.
• offline_access: Allows CallPlease to maintain a “refresh token” so contact sync continues even when the user isn’t actively logged into the CallPlease web interface.

5. Managing Service Access via Enterprise Apps

If your organization uses Conditional Access or Assignment Required policies, you must explicitly assign the users who are allowed to use the integration:

1. Go to Enterprise Applications > CallPlease.
2. Select Properties.
3. If “Assignment required?” is set to Yes, navigate to Users and groups and add the specific “Executives” who will be syncing their contacts.

6. Admin Troubleshooting Checklist

If users report that they cannot connect or that the “Connect to Office 365” button fails:

• API Blocking: Check if you have any Exchange Client Access Policies or EWS (Exchange Web Services) blocks that might be interfering with Graph API calls.
• Integrated Apps: Ensure that Integrated Apps are enabled in the Microsoft 365 Admin Center under Settings > Org settings > Services > User consent to apps.
• Executive vs. Assistant Sync: Remember that in CallPlease, the Executive must be the one to perform the M365 connection. The Assistant then automatically sees those synced contacts through the Executive’s log; the Assistant does not connect their own M365 account to the Executive’s address book.

Summary for End-Users

Once you have configured the M365 side, instruct your Executive users to:

1. Log in to the CallPlease Web App.
2. Click the Pencil Icon (Personalization) or Profile & Call Settings.
3. Select Integrations and click Connect to Microsoft Office 365.
4. Sign in with their corporate credentials and accept the prompt (which will now be pre-approved or allowed by your configuration).