> ## Documentation Index
> Fetch the complete documentation index at: https://docs.daoco.org/llms.txt
> Use this file to discover all available pages before exploring further.

# Connect Outlook Workspace

> Connect admin-approved Microsoft 365 mailboxes through daoco's Outlook Workspace integration gateway.

Outlook Workspace is a **Conditional** Mail & Calendar integration. Use it when a Microsoft 365 admin wants to authorize daoco for approved company mailboxes. daoco connects through an Outlook Workspace [MCP](/connections/integrations#what-is-mcp) gateway after admin approval.

## Connect Outlook Workspace

<Steps>
  <Step title="Open the Outlook Workspace card">
    In daoco, open **Connections** -> **Integrations** -> **Mail & Calendar** and choose **Outlook Workspace**.
  </Step>

  <Step title="Enter the tenant">
    Paste the Microsoft tenant domain or tenant ID, such as `acme.onmicrosoft.com` or the Entra tenant GUID.
  </Step>

  <Step title="Grant admin consent">
    A Microsoft Entra admin grants tenant-wide consent for the daoco application. See [Permissions and admin consent](#permissions-and-admin-consent) below.
  </Step>

  <Step title="Set the mailbox boundary">
    Paste exact mailbox addresses daoco may use, such as `marketing@acme.com` or `support@acme.com`.
  </Step>

  <Step title="Connect">
    After admin consent is complete, choose **Connect**.
  </Step>
</Steps>

## Permissions and admin consent

daoco connects through a shared Microsoft Entra application. A Microsoft 365 admin must grant **tenant-wide admin consent** before daoco can access approved mailboxes.

daoco Microsoft 365 application client ID:

```text theme={null}
96751d00-c515-49a1-a1e4-5dd326653aa5
```

Requested Microsoft Graph application permission:

```text theme={null}
Mail.ReadWrite
```

daoco v1 can read approved mailboxes and create drafts. It does **not** request `Mail.Send`.

### Admin consent flow

An Entra admin can grant consent from the Microsoft Entra admin center, or by opening this URL after replacing `{tenant}` with the tenant domain or tenant GUID:

```text theme={null}
https://login.microsoftonline.com/{tenant}/adminconsent?client_id=96751d00-c515-49a1-a1e4-5dd326653aa5
```

Example for `contoso.onmicrosoft.com`:

```text theme={null}
https://login.microsoftonline.com/contoso.onmicrosoft.com/adminconsent?client_id=96751d00-c515-49a1-a1e4-5dd326653aa5
```

1. Copy the daoco Entra client ID from daoco if needed.
2. Have a Microsoft 365 / Entra admin grant tenant-wide consent for the daoco app.
3. Return to daoco, enter the tenant, set the mailbox boundary, and choose **Connect**.

For more detail on app-only Microsoft Graph access, see [Microsoft Graph app-only access](https://learn.microsoft.com/en-us/graph/auth-v2-service).