Drift Office365 Permissions

The Drift App in Azure is what allows us to interact with our users Microsoft accounts, for both calendars and SSO.  Some orgs will have a Microsoft setup that requires an admin to directly give this Drift app permissions to access a users account.  Most though will allow users to grant it permissions directly. 

The Drift App uses only Microsoft Graph, which we’ll give more details on below.  The app requires these permissions from Microsoft Graph:

• Calendars.Read
• Calendars.Read.Shared
• Calendars.ReadWrite
• Calendars.ReadWrite.Shared
• User.Read

Each graph app also by default gets access to these permissions:

• email
• offline_access
• openid
• profile

None of these permissions require Admin consent unless the org requires any Microsoft app to require admin consent.

Finding the app

The Drift App exists in Microsoft Azure. They will need to navigate to the Azure Active Directory here. There, they can search for "Drift" and enable that app in their Azure Active Directory

Drift uses the common OAuth 2.0 to authenticate from Microsoft, starting with a link like this.

The Drift App uses Microsoft’s Graph API to interact with a users calendar.

• Microsoft Graph is the recommended api from Microsoft to use for things like a calendar integration
• Here’s an overview document of how it works.

Microsoft Graph doesn’t work with most exchange or on premise setups

• This doc runs down the requirements for an exchange setup for graph to work.
• There’s currently no plans to build an exchange integration. Some variety of a cloud calendar will always be required to use Drift <> O365 Calendars.

How it works

• To begin, Drift uses the common OAuth 2.0 to authenticate from Microsoft, starting with a link like this: https://login.microsoftonline.com/common/oauth2/v2.0/authorize
• The Drift App uses Microsoft’s Graph API to interact with a users calendar. 
• Microsoft Graph is the recommended api from Microsoft to use for things like a calendar integration
• Here’s an overview document of how it works.
• Microsoft Graph doesn’t work with most exchange or on premise setups
• This doc runs down the requirements for an exchange setup for graph to work
• There’s currently not plans to build an exchange integration.  Some variety of a cloud calendar will always be necessary.