Understanding permissions

Understanding permissions


TL;DR: Outlook Calendar Integration Plus needs permissions on two sides: your Microsoft 365 tenant (one-time admin setup) and your  monday.com  account (standard three-level permissions).
Most users won't need to do anything special — once both sides are configured, each team member can connect their own Outlook account independently.

Before you start

  • This page covers both Microsoft 365 and  monday.com  permissions. If you're only troubleshooting one side, jump to the relevant section
  • For installation steps, see  Installation & Set up⁠ 

Microsoft 365 permissions

The app needs access to users' Outlook calendars. This requires a one-time tenant configuration by your Microsoft 365 admin, after which individual users can connect on their own.

Step 1: Allow user consent for verified publishers (one-time)

Your Microsoft 365 admin needs to enable user consent for apps from verified publishers. Fantasy Media is a Microsoft verified publisher, so once this setting is enabled, users can grant the app access to their own calendars.
In the Microsoft Entra admin center, go to Enterprise applications → Consent and permissions → User consent settings and select:
"Allow user consent for apps from verified publishers, for selected permissions"
This is a one-time tenant configuration — your Microsoft 365 admin doesn't need to touch  monday.com  at all.

https://slite.com/api/files/SAqoGGQvSa8WHo/image%20(4)%20(1).png?apiToken=eyJhbGciOiJIUzI1NiIsImtpZCI6IjIwMjMtMDUtMDQifQ.eyJzY29wZSI6Im5vdGUtZXhwb3J0IiwibmlkIjoiWkU4bUZSTDRnal9FZGkiLCJpYXQiOjE3ODUyMTUzNjIsImlzcyI6Imh0dHBzOi8vc2xpdGUuY29tIiwianRpIjoiU0xlN0ZvTy1KX2pGUzIiLCJleHAiOjE3ODc4MDczNjJ9.oWDQRz2P9EHdpTRV3BWX-LrJATAD0i2Fxs3oWByhG7M

Step 2: First user authentication

The  monday.com  admin who installs the app will be the first person to authenticate their Microsoft 365 account. During this first authentication, Microsoft may show a consent prompt that requires Microsoft 365 admin approval.
To allow users to request this approval, your Microsoft 365 admin should go to Enterprise applications → Admin consent settings and set:
"Users can request admin consent to apps they are unable to consent to" → Yes
The Microsoft 365 admin can approve the request through the consent URL provided.

Step 3: All other users connect independently

Once admin consent is granted, all other team members can independently connect their Outlook accounts through the sync setup UI — no further admin action needed.

 monday.com  permissions

 monday.com  requires permissions at three levels. The user setting up the sync needs the right level at all three:
  • Account level — Create automations / integrations + Create webhooks
  • Workspace level — Create automations / integrations + Create webhooks
  • Board level — Edit access (Owner, Subscriber, or Member with edit rights)
If you're an Admin or a Member with standard edit access, you almost certainly have all three.

Verify account-level permissions

Navigate to your avatar (upper-left corner) → Administration → Permissions.
You'll see different roles (Admin, Member, Guest, etc.). For the user who'll set up the sync, confirm their role allows:
  • Create automations / integrations — must be enabled
  • Create Integrations → Webhooks — must be enabled

Verify workspace-level permissions

Open the workspace dropdown → select the relevant workspace → Permissions.
You'll see Workspace Owner, Workspace Member, and Workspace Non-member roles. Confirm the same two permissions are enabled:
  • Create automations / integrations — must be enabled
  • Create Integrations → Webhooks — must be enabled

Verify board-level permissions

Open the board → click the 3-dot menu → Permissions.
The user must have edit access — Owner, Subscriber, or Member with edit rights.

https://slite.com/api/files/-aW_3iL70uo8oC/Screenshot%202025-03-11%20at%2010.02.27.png?apiToken=eyJhbGciOiJIUzI1NiIsImtpZCI6IjIwMjMtMDUtMDQifQ.eyJzY29wZSI6Im5vdGUtZXhwb3J0IiwibmlkIjoiWkU4bUZSTDRnal9FZGkiLCJpYXQiOjE3ODUyMTUzNjIsImlzcyI6Imh0dHBzOi8vc2xpdGUuY29tIiwianRpIjoiU0xlN0ZvTy1KX2pGUzIiLCJleHAiOjE3ODc4MDczNjJ9.oWDQRz2P9EHdpTRV3BWX-LrJATAD0i2Fxs3oWByhG7M

Common gotchas

  • All three  monday.com  levels matter. If even one (Account, Workspace, or Board) is missing, sync creation will fail — even if the other two are correct
  • Microsoft consent is per-tenant, not per-user. Once the Microsoft 365 admin approves the app, all users in the organization can connect — no per-user approval needed
  • Roles can vary by workspace. A user who's an Admin in one workspace may be a Member in another. Check the workspace where the board lives
  • Guests can't create syncs. They need to be promoted to Member or higher first
  • Permission changes are instant — refresh your browser after updating and try again
  • Fantasy Media is a Microsoft verified publisher — the app meets Microsoft's security and compliance requirements
  • Each user connects their own Microsoft account — no one can access another user's calendar
  • The Microsoft 365 admin only needs to act once. After that, all users self-serve
  •  monday.com  permissions are the same as for any other Marketplace app (SA, CBA, etc.)

Troubleshooting

 monday.com  side: "Sorry, something went wrong"

This error is almost always a permissions gap at one of the three  monday.com  levels. Walk through the three verification sections above and update whichever role is missing the permission.
If permissions are correct but the error continues, the app's connection to your  monday.com  account may be in a broken state. The fix is to uninstall and reinstall:
    Click the puzzle icon at the top-right of  monday.com  to open the Marketplace
    Find Outlook Calendar Integration Plus → click the 3-dot menu → Uninstall
    Reinstall and add it to the relevant workspaces (we recommend All Workspaces )
    Set up your sync again
Reinstalling resets the app's connection but deletes any existing syncs. They'll need to be recreated. Try permission fixes first — reinstall only as a last resort.

Microsoft side: consent prompt blocked

If users see a consent error when connecting their Outlook account:
    Confirm your Microsoft 365 admin has enabled user consent for verified publishers (see Step 1 above)
    Confirm admin consent requests are enabled (see Step 2 above)
    If your organization uses strict policies, the Microsoft 365 admin may need to grant consent directly through the admin consent URL

Next up

Related

  •  Installation & Set up⁠  — install the app on your board
  •  Connect your Outlook account⁠  — link your Microsoft account
  •  Setting up a Sync⁠  — configure your first sync
  •  Security & Privacy⁠  — how we handle your data

Still stuck?

If you've checked both Microsoft and  monday.com  permissions and the issue persists, email  support@fantasymedia.io  with a screenshot of the error and your  monday.com  account name. We'll help you unblock.