Loading

Configure Office365 Permissions for the Salesforce Inbox App

Veröffentlichungsdatum: May 4, 2026
Beschreibung
Note: This information applies to legacy versions of Salesforce Inbox for Outlook and Gmail, and the standalone Salesforce Inbox app for iOS and Android.

Salesforce Inbox requires permission via an OAuth flow to access a user's Office 365 email inbox. If the Office 365 setting Users can consent to apps accessing company data on their behalf is set to No, non-admin users are blocked from connecting their Office 365 email account to Salesforce Inbox via the OAuth authorization flow.

Error Message

When a non-admin user attempts to connect their Office 365 account to Salesforce Inbox without admin consent already granted, they receive the following error:

"Need admin approval. Salesforce Inbox needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it."

This error appears because the Office 365 tenant requires admin-level authorization before third-party apps like Salesforce Inbox can access organizational resources.

Lösung

To resolve the "Need admin approval" error in Salesforce Inbox for Office 365, an Office 365 administrator must grant admin consent to Salesforce Inbox on behalf of the entire organization. This grants the required permissions once for all users, so individual users are not blocked or prompted for admin approval when connecting their inbox.

Set Up Office 365 Admin Consent for Salesforce Inbox

Note: To learn more about admin consent in Azure Active Directory, see the Microsoft Documentation.

You have two options:

Option A — Enable global user consent (not recommended for most orgs): Set the Users can consent to apps accessing company data on their behalf setting to Yes in Azure AD. Users will receive a normal consent prompt when logging in to Salesforce Inbox. Note: This setting applies globally to all apps configured with Office 365 in your tenant.

Option B — Grant admin consent for Salesforce Inbox only (recommended): Grant permissions once for all users without changing the global setting. To do this:

  1. Navigate to the Salesforce Inbox Admin Consent URL.
  2. Log in with your Office 365 administrator account. A consent window appears.
  3. Click Accept to grant admin consent permissions to Salesforce Inbox for your organization.

After consent is granted, subsequent login attempts from non-admin users to Salesforce Inbox proceed with a normal login flow — no admin approval prompt appears.

Nummer des Knowledge-Artikels

000383477

 
Laden
Salesforce Help | Article