Automize: for IT administrators

At a Glance

The plain-English summary. The full legal text below is the binding document.

Application ID

d857092a-50c0-4998-830b-dbd867f6689b

Publisher

Capitol Hill Consulting (Pty) Ltd

Permissions

12 delegated – see § 2.

Data kept in

Amazon Web Services, Ireland (eu-west-1)

Lets people at your company connect their own Microsoft 365 mailbox, Teams chats and calendar to Automize.

1. Check it is really us

Before you approve, check that Microsoft's approval screen shows this application ID. An email can be faked; this page is on our own site.

App name	Automize
Application (client) ID	`d857092a-50c0-4998-830b-dbd867f6689b`
Publisher	Capitol Hill Consulting (Pty) Ltd
Approval page	login.microsoftonline.com (Microsoft's own). Automize never asks for your password.

2. What it asks for

Permission	Type	What it allows	Why
`offline_access`	Delegated	Keep the connection working without signing in again.	Focus checks mail every hour, while nobody is signed in.
`openid`	Delegated	Sign the person in.	So Automize knows which Microsoft 365 account was connected.
`profile`	Delegated	Read the person's name.	To show whose account the connection is.
`User.Read`	Delegated	Read the person's own profile (name and email address).	To tell their own messages from other people's.
`Mail.Read`	Delegated	Read mail in the person's mailbox.	Focus reads the inbox to sort and summarise new mail. Processes using the connector can read mail.
`Mail.Read.Shared`	Delegated	Read mail in shared mailboxes the person can already open.	Only the shared mailboxes the person names, such as support@ or accounts@.
`Mail.ReadWrite`	Delegated	Move and delete mail in the person's mailbox.	Focus clean-up moves newsletters and automated mail to Deleted Items and empties it. Processes can file mail.
`Mail.ReadWrite.Shared`	Delegated	Move and delete mail in shared mailboxes the person can already open.	The same clean-up and filing, for the shared mailboxes the person names.
`Mail.Send`	Delegated	Send mail as the person.	When the person, or a process they set up, sends mail from Automize.
`Mail.Send.Shared`	Delegated	Send mail from shared mailboxes the person may already send from.	The same, from a shared mailbox.
`Chat.Read`	Delegated	Read the person's Teams chats.	Focus shows Teams messages waiting for an answer alongside mail.
`Calendars.ReadWrite`	Delegated	Add, change and remove events in the person's calendar.	Bookings the person owns in Automize go into their Outlook calendar.

These are delegated permissions: Automize only ever acts as a person who connected, and only reaches what that person can already reach. Approving as an administrator grants them for everyone in your organisation, so each person can connect without being asked to consent. Nobody is connected until they choose to connect.

3. Who can approve, and how

Each person can connect and consent for themselves, if your organisation allows that. If it does not, they can send you an approval link from Automize. A Global Administrator, Privileged Role Administrator, Application Administrator or Cloud Application Administrator can approve it for everyone.

4. What Automize keeps

An access token and refresh token per connected person, encrypted.
For mail Focus sorts: the sender, subject, a short preview, its summary and any draft reply it writes.
The shared mailbox addresses each person names.

Stored in Amazon Web Services, Ireland (eu-west-1). See our Privacy Policy and Trust Center for sub-processors and retention, or request our Security & Compliance Pack for the data processing agreement.

5. Switching it off or removing it

Each person: Settings › Connectors › Microsoft 365 › Delete connection.
In the Microsoft Entra admin center: Enterprise applications › search for the application ID › Properties › Delete. This disconnects everybody at once.

Questions, or a request you think is not genuine

Write to security@automize.co.za. To report a vulnerability, see Security Disclosure.