Topic
When trying to connect RPA LE Bot to Microsoft Exchange, the admin for Microsoft Entra Admin Center will need to approve the first login. After this, the Admin will not need to perform these actions again unless the Email Token becomes corrupt or is deleted.
Instructions
1. Using Microsoft Entra Admin Center, manually grant admin consent:
- An Entra ID administrator must manually provide approval if the organization's regulations demand that an administrator authorize app rights.
- How to Give Admin Consent: Go to the Microsoft Entra Admin Center and log in:
- Visit the website https://entra.microsoft.com.
Use your Application Administrator or Global Administrator login information to log in. - Locate the App That Needs Approval:
Go to Enterprise Applications under Identity > Applications.
Find the relevant app. It could need to be registered under App registrations if it isn't on the list. - Examine and provide administrative consent:
After selecting the app, select Permissions.
Click Grant admin consent for [Your Organization] under Permissions asked.
Verify the approval.
2. Turn on User Consent (If Allowed)
- Users might not be able to agree to apps' requests for specific permissions by default. An administrator can let users approve apps with low-risk permissions if this is too restrictive.
- How to Make User Consent Available:
- Go to Settings for User Consent:
Go to Identity > Applications > Enterprise applications > User settings in the Microsoft Entra Admin Center. - Change the Consent Configuration:
Look for the phrase "Users can consent to apps accessing company data on their behalf."
Change it from "No" to "Yes" or use custom consent policies to build up more precise controls.
3. Use Basic Authentication, this should not require the admin approval, however, this may be considered insecure.
- OKTA sso will have to use OAUTH to authenticate with Bot, therefore, it will still trigger the Admin popup.
Additional Information
Nintex Help Document for Email Setup
https://help.nintex.com/en-US/rpa/Botflow/Email_Accounts.htm