PoliteMail Simple Implementation
General information on installing and accessing PoliteMail can be found here.
M365 Add-In Permissions
For our simple implementation, a Technical Admin user (typically an M365 Admin) will create the PoliteMail User Group in M365, install the app in the System Administrator role, and send an email, which will initiate a consent dialog for the permissions needed for the PoliteMail Group to use the app.
The Systems Admin user role will have technical configuration controls for all the PoliteMail users joining the account, may change the default user settings, monitor user login activity, see the health of the PoliteMail service, see email processing status, and have control of emergency shut-offs.
A description of all SysAdmin settings can be found here.
Explanation of App Permissions Required
| Permission Requested | What does this mean and why is this Graph Permission necessary? |
|---|---|
Send email as you | The Mail.Send permission is used because this app adds analytics encoding to the message and then issues (sends) the email immediately after you send it, or later when using the scheduled or time-zone sending features. |
Send email on behalf of others | The Mail.SendShared permissions allows the app to send From other addresses (which you have permission to send from in Outlook) besides your own personal address (such as shared mailboxes or on-behalf of). |
Read user basic mail | User.ReadBasic.All permissions allows the app read limited email profile information, including name, email address and avatar. This is used to populate the address book.
This permission does not allow the app to read mail items or messages.
|
Read mailing settings
| MailboxSettings.Read allows the application mailbox settings for language preference, working hours and time zone, enabling the send by time-zone feature.
|
Read basic mail you can access | Mail.ReadBasic.All permission allows the app to access and read basic mail properties of mailboxes without a signed-in user (delegated). This enables features like scheduled sending. |
View your basic profile | The User.Read permission allows the app to read your user profile properties (name, user name, email, avatar) and is used for authentication and OpenID tokens. |
Read Group Membership | GroupMember.Read enables reading the distribution list membership for counting the size of the list and measuring each address individually. |
Maintain access to data you have given it access to | This is not a one-time permission, so access to the data (e.g. the address book and email settings) continues until the app is uninstalled. |
Consent on behalf of your organization | Admin setting which enables these permissions for all other users/installers of the app within your M365 tenant organization. |
