Goal: Understand the Microsoft permissions Gluu requests and how they enable sign-in and SharePoint/OneDrive features.
Before you start #
- Plan: Basic Microsoft sign-in works on every plan. Saving case files to SharePoint and embedding OneDrive/SharePoint documents requires the API & Connectors add-on.
- Role: A Microsoft 365 administrator needs to grant or review consent for these permissions; individual users only see a one-time consent prompt.
- Setup: Have your Microsoft 365 admin ready to review the consent prompt, or to grant admin consent for all users. See SSO configuration guide for connecting Azure AD.
Permissions Gluu requests #
“Maintain access to data you have given it access to”
Lets Gluu complete actions on your behalf when you’re not actively signed in (e.g., background syncs).
“Sign you in and read your profile”
We create your Gluu user with the correct email, first name and last name.
“Read all files that you have access to”
Embed documents from OneDrive and SharePoint directly in work instructions.
“Edit or delete site collection”
Allows Gluu to save case files to the correct SharePoint folder structure for your cases.
Your Microsoft 365 administrator can grant consent on behalf of all users so individuals don’t see the prompt.
FAQ – Microsoft AD permission basics #
Gluu requests a small set of Microsoft Graph permissions to sign you in with your existing profile, keep background syncs working when you're not actively signed in, and—if you use the add-on—embed OneDrive/SharePoint files or save case files to SharePoint.
Basic Microsoft sign-in works on every plan. Saving case files to SharePoint and embedding OneDrive or SharePoint documents in work instructions requires the API & Connectors add-on.
Not necessarily. A Microsoft 365 administrator can grant consent on behalf of all users, so individual users won't see the consent prompt when they sign in.
It allows Gluu to create and manage the SharePoint folder structure it uses to save case files—it does not give Gluu general access to edit or delete unrelated SharePoint sites in your tenant.
Yes, for specific background tasks. The "maintain access to data you have given it access to" permission lets Gluu complete actions such as background syncs even when you're not actively signed in.
