Microsoft 365

How to authorize Speaking Email on your Microsoft 365 account


Connect Your Microsoft Email

Depending on your Microsoft 365 policies you may need to have Azure tenant admins provide permission to access corporate email. If so, when you try to connect within Speaking Email typically a Microsoft screen will appear saying "Need admin approval".

To do this, your Azure admin can either use the form here or the Azure portal (see further below).



Enable Permissions Using Form

Permission type:
This will grant Speaking Email access to your own mailbox. It works for most work/school accounts as well as personal accounts (Outlook.com, Hotmail.com).
This allows others in your org to connect their own mailbox. It is a delegated permission, meaning it only allows access for the specific user who signs in. This ensures secure, individual control over mailbox access.
Email protocol and permission type to use:
Connects via Microsoft Microsoft Graph API using full mailbox permission (EWS.AccessAsUser.All). Speaking Email does not use EWS directly, but this permission is required in many Microsoft 365 environments to enable users to connect.
Use this if your org uses Entra Intune MDM/MAM (iPhone only).
Legacy protocol, use this if your org does not have support for MS Graph API.
Enter your email address (with the correct tenant domain name):



Enable Permissions Manually Using Azure/Intune Portal

If you prefer, you can use the Azure/Intune portal to enable Speaking Email for your organization. In Azure Portal, select Enterprise Applications, click +, search for 'Speaking Email'.

Azure Apps
Choose the right Azure App for your connection protocol.

Speaking Email Office 365 Direct (MSGraph connection)

Works for most configurations
App ID: af56e8fb-8042-48aa-b89d-3199d6a58f0b • View on Azure Marketplace
or

Speaking Email Azure Intune

Use this app listed in the Intune App Catalog if your org uses Entra Intune MDM/MAM (iPhone only).
App ID: c1c8d5f7-f73e-4857-a22f-e6ac1fce7150 • View on Azure Marketplace
or

Speaking Email Office 365 ActiveSync Modern Auth

Legacy protocol, use this if your org does not have support for MS Graph API.
App ID: 7c5a92a2-b000-4c93-a0d7-c51252984db4
Permissions needed
You can use either choose full mailbox access or only the required permissions.

Only required permissions

openid offline_access Mail.ReadWrite Mail.Send User.Read
Only for 'Speaking Email Office 365 Direct (MSGraph connection)'
or

Full mailbox access

openid offline_access EWS.AccessAsUser.All
Works with all protocols (also called "Access mailboxes as the signed-in user via Exchange Web Services" or 3b5f3d61-589b-4a3c-a359-5dd4b5ee5bd5).

These are all delegated permissions, so admin consent does not directly provide any access - each user must then grant access themselves.
EWS needed
Speaking Email does not use Exchange Web Services (EWS) but in many tenants this must be enabled for Graph API to work. It can be disabled at the tenant level or the user account level.