Skip to content
English
Customer portal
Go to kudurrustone.com
  • There are no suggestions because the search field is empty.

Microsoft Email Integration: Why Admin Approval Is Required

When connecting your Microsoft 365 email account to Kudurru Stone, some users may see a message stating “Need Admin Approval.” This is normal and expected behavior depending on your organization’s security settings. This article explains why this happens and how your Microsoft 365 administrator can approve the connection.

Why Am I Seeing “Need Admin Approval”?

Kudurru Stone uses Microsoft Graph to securely read, sync, send, and organize email messages on your behalf. Microsoft categorizes email access as a high-privilege operation, and many organizations require an administrator to approve applications that request:

  • Mail.ReadWrite (read and write a user’s mailbox)

  • Mail.Send (send email as the user)

  • offline_access (allows KS to maintain sync without re-authenticating daily)

  • Mailbox sync permissions such as delta tracking

These permissions allow our platform to provide full email functionality—thread syncing, automated logging, reply tracking, and more.

Because these actions involve sensitive data, Microsoft may require an administrator to approve Kudurru Stone once for your organization.

This Behavior Is Normal for Microsoft 365

Many companies—including HubSpot, Salesforce, Monday.com, and NinjaOne—require admin consent for mailbox access. Whether the admin-approval screen appears depends entirely on your organization’s Microsoft 365 security settings.

Some organizations allow users to self-consent to apps.
Others require admin approval for all apps accessing email.

Either way, this is expected and not a sign of an error.

How to Approve the Kudurru Stone App

Your Microsoft 365 administrator can approve the application for your organization by clicking this link:

Admin Consent URL:

Admin Consent URL

Once approved, all users in your organization can connect without seeing the admin approval message.

What Happens After Approval?

Once an admin approves the integration:

  • Normal users can sign in with Microsoft 365 immediately

  • The Kudurru Stone email sync service will begin pulling email threads

  • Sending through Microsoft Graph will be fully enabled

  • No further admin action is required

Still Have Questions?

Our support team is here to help you through setup or troubleshoot your Microsoft email integration.