[OAuth 2.0 - Micollab] Calendar integration Permission error

[b.souchet]

Hello,

I am contacting you because following the deactivation of the basic authentication protocol by Microsoft, we are unable to implement the OAUTH2.0 protocol on our Micollab server.

We have followed the help section provided by mitel (see attachment), but we see in the "cim.log" log file that the user does not have sufficient rights to access the calendars of our tenant's users. (see attachment).

I also attach a screenshot with the access rights configured on the API. We must filter access as accurately as possible for security reasons.

thank you in advance for your help

Benjamin

[axemanozh7]

I'm having trouble getting this going, as well. Everything connects in the CloudLink section, and as you note, we set up the permissions in our Azure/365 tenant as per Mitel's instructions but we get the insufficient permissions error as well. NuPoint Advanced UM voicemail-to-e-mail is the bigger concern as that is high value for a lot of our users, so we'll be opening a case with our Mitel re-seller this week to check into it. (Microsoft will permanently disable basic authentication by 1/1/23, so we need this fixed by then.)

I'll come back and update this thread if we get it figured out.

[lundah]

You need to grant the service account "full_access_as_app" permissions.

[axemanozh7]

You need to grant the service account "full_access_as_app" permissions.

We did that to no effect. Speaking with our Mitel reseller this morning, they said that there is a known issue in some versions of MiCollab that they are checking into.

[b.souchet]

Hello @Lundah,

For my case, we managed to get the calendar integration working with "full_access_as_app" rights to validate that the Micollab server side configuration and Microsoft API was OK, however, we need to refine the access rights for security reasons.

The "full_access_as_app" rights are too permissive and will allow a malicious person to access all user mailboxes, whether in reading or writing..... So we want to configure only read access on the calendars.

Regards
Benjamin