Connect Microsoft 365 to TalentDesk

When you click Connect Microsoft 365, Microsoft shows a consent screen listing what TalentDesk can do. Microsoft words these permissions broadly; this is what each one allows and what TalentDesk uses it for:

• 1Sign you in and keep you connectedYour name, email address and basic profile, and access that stays on until you revoke it.
• 2Read and write your mailTo read your Inbox for job briefs and job applications (and any folder you made for applications), read your Sent Items to learn your writing tone, and create drafts. It also lets your AI assistant find and read any email you ask it about, except Deleted Items and Junk Email.
• 3Create draftsMost candidate and client emails, submission packs and interview invites land in your Drafts folder for you to review.
• 4Send mail as youThe emails you choose to send, and a few that go without a draft, such as team invitations and the notices your agency switches on.
• 5Read and write your calendarTalentDesk books interviews and reminders only when you confirm them.
• 6Create and read online meetings, and read their transcriptsMeeting links for interviews, and the transcripts of interviews you organise.
• 7Read and write your OneDrive filesTalentDesk turns Word documents, such as a candidate's CV or a position description, into PDFs by writing a working copy into its own folder in your OneDrive, then deletes the working copy.
• 8Read SharePoint sites you can accessFiles you link from SharePoint or OneDrive in Settings > Documents. TalentDesk checks a folder link when you save it or scan a shared folder, and reads your candidate consent form through its link to attach it to consent requests.
• 9Read your organisation's directorySo an owner or manager can see your team in Settings. It gives no access to anyone else's mailbox.

Most candidate and client emails start as drafts in your Outlook Drafts folder. Each of those goes when you send it: from Outlook, with Send in TalentDesk, or by confirming it in your AI assistant.

Some emails go without a draft: sign-in, password-reset and email-confirmation links; team invitations, join requests and decisions, and new-account alerts; workspace owner invitations; the placement and other notices your agency switches on; and, when behavioural assessments are on, their invitations, reminders and results. These can go from another connected mailbox in your agency, such as an owner's or an admin's, rather than yours.

In most organisations, Microsoft lets you approve apps for your own mailbox - click Accept and you are connected. Done.

Some organisations are set up so an IT admin approves new apps first - normal in larger firms. If you see Need admin approval, send your IT contact the pre-written email below. They either approve the consent request you just submitted, or grant consent from the Microsoft Entra admin centre (Enterprise applications, TalentDesk, Grant admin consent). Then click Connect again and you are in.

Tokens are encrypted at rest and scoped to exactly the permissions on the consent screen. Revoke any time from myapps.microsoft.com (or your admin can, from Entra) - the connection stops immediately.

Note: Sign in with Microsoft on our login page is a separate, sign-in-only permission (your name and email). Approving it does not grant mailbox access, and connecting your mailbox does not change how you sign in.