For IT administrators
Integration, permissions and security
What your IT team needs to approve Loadagent for Microsoft 365: how the integration works, the exact permissions, the one-time admin consent, and the essentials of how we handle data. A detailed IT and security document is available on request.
How the integration works
- 01
Users sign in
Dispatchers sign in at app.loadagent.ai with an email sign-in link or their Microsoft account. Nothing is installed and nothing runs inside your network or tenant.
- 02
Each dispatcher connects their own mailbox
Outlook or Exchange Online through Microsoft OAuth with the delegated permissions below, or any IMAP/SMTP server. Loadagent sends outreach from that mailbox and reads the replies to its own threads.
Microsoft 365 permissions
Loadagent requests six delegated permissions. Delegated means each token acts as one signed-in user and reaches only that user's mailbox. Loadagent is a Microsoft verified publisher.
- Mail.ReadWrite
- Mail.Send
- openid, profile, email
- offline_access
Verify the list on the consent screen and afterwards in Entra ID under Enterprise applications > Loadagent > Permissions.
One-time admin consent
Many tenants block users from consenting to third-party apps. Microsoft then shows "Need admin approval" when a dispatcher connects Outlook, and an administrator has to approve Loadagent once for the whole organisation. The approval registers Loadagent in your tenant. No token is issued and nothing is stored on our side until a user connects.
Approve with a link
https://login.microsoftonline.com/organizations/v2.0/adminconsent?client_id=280d7660-1538-4968-8e6d-1fe5a0f29a32&redirect_uri=https%3A%2F%2Fapp.loadagent.ai&scope=https%3A%2F%2Fgraph.microsoft.com%2FMail.ReadWrite+https%3A%2F%2Fgraph.microsoft.com%2FMail.Send+openid+profile+email+offline_access&state=loadagent-admin-consent- Open the link in any browser and sign in with a Global Administrator, Privileged Role Administrator or Cloud Application Administrator account.
- Review the permissions and choose Accept.
- You land on the Loadagent sign-in page with a confirmation. From then on every dispatcher clicks Connect Outlook in Settings without an approval prompt.
Approve in Entra ID instead
Entra admin center > Enterprise applications > Loadagent > Permissions > Grant admin consent. Loadagent appears in that list only after someone has used the link or attempted to connect.
The admin consent request workflow is not a per-user approval: approving the first request grants consent for the whole organisation.
Limit who can use Loadagent
For per-user control set Assignment required to Yes on the Loadagent enterprise application and assign only the dispatchers who will use it. Everyone else is blocked at sign-in.
Data and security at a glance
- Loadagent never sees mailbox passwords or MFA factors, and the credentials it does hold are protected with state-of-the-art encryption.
- All data is processed and stored on Google Cloud in the European Union.
- Access can be revoked at any time in Entra ID or in Loadagent settings. Disconnecting a mailbox deletes its stored tokens.
- Loadagent Technologies MB is an EU company and acts as a data processor under GDPR. A Data Processing Agreement and the detailed IT and security document are available on request.
Security questions
Write to us and we answer directly, or walk your administrator through the consent on a short call.
[email protected]