Microsoft 365 approval
When your company only lets IT approve apps, how your IT administrator approves LogQuill once so everyone can connect their Outlook calendar.
Who: anyone connecting an Outlook calendar with a work or school account, and the company's Microsoft 365 administrator. This is your company's Microsoft setting, not a LogQuill admin setting.
Why you're seeing this
Many companies only let their IT administrator approve apps that connect to Microsoft 365. When you connect Outlook (Microsoft 365) in Integrations, Microsoft then shows Need admin approval (or Approval required), and LogQuill's page says Outlook (Microsoft 365) needs your administrator. Nothing was connected.
This comes from your company's settings, not from your account or from LogQuill. An administrator approves LogQuill once for the whole company, which takes about two minutes. After that, everyone can connect their own calendar, without asking again.
Personal Microsoft accounts (Outlook.com, Hotmail) and Google Calendar never need this.
Ask your IT administrator
Copy the message below.
Send it to your IT administrator, by email, Teams or Slack. If you don't know who that is, ask your IT or help desk channel.
Once they've approved it, connect again: your menu (your name at the bottom of the sidebar), then Integrations, then Microsoft 365.
Hi,
I'd like to connect my Outlook calendar to LogQuill, the time tracking and absence app we use in
Jira. Our Microsoft 365 settings ask for an administrator to approve it first.
Approving it takes about two minutes, from this link, with a Global Administrator, Cloud
Application Administrator or Application Administrator account:
https://login.microsoftonline.com/organizations/adminconsent?client_id=268fa0a5-9400-44ff-b33d-2768f67cc80c
It lets each person connect only their own calendar, never anyone else's. What it asks for and why:
https://docs.logquill.com/docs/administration/microsoft-365-approval
Thanks!If you're the IT administrator
Open the approval link, signed in with a Global Administrator, Cloud Application Administrator or Application Administrator account:
Check the permissions (listed below) and click Accept. LogQuill's page then says LogQuill is approved for your organisation.
That's all. Everyone in your organisation can now connect their own calendar from LogQuill.
If your organisation uses admin consent requests, the person's request may already be waiting: in the Microsoft Entra admin center, go to Enterprise applications → Admin consent requests, find LogQuill and approve it there.
What LogQuill asks for
All of them are delegated permissions: LogQuill acts only as the person who connected, on their own calendar, while they keep it connected.
| Permission | Why |
|---|---|
openid, email, User.Read | Sign the person in and read their email address, so the page can say whose calendar went to whose LogQuill. |
offline_access | Keep reading the calendar without signing in again every hour. |
Calendars.Read | Read the person's meetings, to suggest them as worklogs, and their Out of office events, if they turn those into absences. |
Calendars.ReadWrite | Only used if the person ticks Add my approved absences to this calendar: LogQuill adds, moves and removes events named "Out of office" for their approved absences, and nothing else. |
LogQuill never reads anyone else's calendar, or anyone's mail, contacts or files. From the person's own calendar it reads only what Privacy lists: each event's title, description, start and end, and whether it repeats, was declined, shows as free or is an Out of office event. Meetings are shown only to the person whose calendar it is.
Questions administrators often ask
Can we limit who can use it?
Yes. In the Microsoft Entra admin center, go to Enterprise applications → LogQuill → Properties, set Assignment required to Yes, then add the people or groups who may use it under Users and groups.
Does approving it give anyone access to other people's calendars?
No. The permissions are delegated: each person connects their own calendar, and LogQuill reads only that one, for that person. Approving once only saves each person from asking.
How do we take it back?
In the Microsoft Entra admin center, go to Enterprise applications → LogQuill. Under Properties, turn off Enabled for users to sign in, or delete the application to remove every permission given. LogQuill can't read the calendars from then on, and each person's Integrations says "Access was withdrawn or expired. Connect again to keep getting meetings." Anyone can also disconnect their own calendar there at any time.
Can we review security first?
See Security and privacy, Subprocessors and Data processing, or write to [email protected].