What is an Application Access Policy?

An application access policy is a set of rules and configurations that define how users or groups can access and interact with a specific application or service within an organization's IT environment. These policies are implemented to ensure secure and controlled access to applications, protecting sensitive data and resources.  Implementing an application access policy allows organizations to limit which exchange users within their tenant TeamConnect can access.

Why use an Application Access Policy? 

First and foremost, this is optional, and completely dependent on your organization’s internal controls/policies. 

The minimum required permissions to make the Appointments and Document integration work are the following:  

• ‘User.Read.All’  - Allows the user to log in.
• ‘Calendars.ReadWrite’  - Allows the app to create, read, update, and delete events of all calendars.

Please find additional details below on how to set one up.   

Setup Steps (Pre-Requisites):

1. TeamConnect Appointment Configuration: Ensure the TeamConnect instance is configured by adding Graph API keys and testing the connection.
2. Add Emails to Contacts in TeamConnect: Populate the contact list in TeamConnect with relevant email addresses 
3. Admin Center Configuration: Create an Email Enabled security group in the Microsoft admin center to add multiple members (note, members must exist in TeamConnect)

4. Azure Directory Configuration: Set up APIs, and keys, and grant admin consent. Configure API permissions for the application. Please refer Azure Keys for Graph API Configuration for more information.
5. App Policy Configuration: Utilize PowerShell commands to configure the application access policy.

How to set Application Access policy?

We highly recommend you read through the Application Access Policy Microsoft Docs

• Connect to Exchange Online Powershell
• Creating New Application Access Policy
• Application Access Policy Creation Parameters
• Remove Application Access Policy