Connect Microsoft 365 via the Robin OAuth App

Install Robin's sync app on your Microsoft 365 account to connect room calendars to spaces in Robin. The app is a domain-level "Enterprise App" with permission to manage room resources in your account. You can see a list of the other apps you installed this way.

If you are new to Microsoft 365, see Microsoft's guide to administering apps like Robin.

Required permissions to complete this step

You need a Microsoft global admin. A user with the Application Administrator and Privileged Role Administrator roles can also install the app.

Install the app

Start the installation in Robin, then sign in and accept permissions in Microsoft.

  1. In Robin's web dashboard, go to Manage > Integrations.
  2. Find Microsoft 365 and select Set up. The Microsoft 365 page opens.
  3. Select Connect at the top of the page. The Connect Microsoft 365 Integration window opens. If your organization has no calendar connected, you can also select Microsoft 365 in the Connect calendars card on the Integrations page.
  4. Select Connect via App. This starts the OAuth flow, which connects to your account and installs the app.
  5. In the Microsoft window, sign in with a global administrator account. The window asks for account credentials or shows a list of your Microsoft accounts. The app is for your entire domain, so you need a global administrator account.
  6. In the Microsoft Permissions requested window, select Accept. Robin asks for permission to access calendar information to sync events. The window lists these permissions:
    • Read organization information
    • Read directory data
    • Read and write calendars in all mailboxes
    • Sign in and read user profile
    • Use Exchange Web Services with full access to all mailboxes

After the app installs, you can pair calendars managed by this account to your spaces. To confirm the installation, check that Robin shows in your domain's app overview: https://myapps.microsoft.com

Why Robin asks for full access to all mailboxes

Robin uses an authentication method called OAuth to install the app on your Microsoft 365 account securely. With OAuth, an app requests very specific rights for your account. For Microsoft 365/EWS, Microsoft requires that all OAuth apps request mailbox permission for EWS APIs. After installation, the Robin app interacts only with your calendars.

Read more about app privileges in Microsoft 365.

Fix common sign-in errors

If you cannot install the app or sign in, find the error below.

Error Fix
AADSTS90093: "This operation can only be performed by an administrator" Microsoft shows this error, under "Sorry, but we're having trouble signing you in", after you select Accept. Your account is not a Global Admin. Log in with a different account, or ask your IT department to change your user permissions until you finish the installation.
"Need admin approval" for Robin Powered Service, when you log in to Robin with single sign-on Enable user consent at the organizational level. Users can then log in with Microsoft 365. The Robin app is not in the Microsoft Store, so single sign-on for Microsoft 365 requires user consent.

Articles in this section

Was this article helpful?
2 out of 7 found this helpful
Share