1. Before you start
- On the Microsoft 365 connection, select outlook.mail, outlook.calendar, or both to match the approved Outlook access.
- Grant MailboxSettings.Read plus Mail.Read and/or Calendars.Read as Microsoft Graph Application permissions, then have an Exchange administrator use Application RBAC when provider-side access must be limited to approved mailboxes.
- Do not send Outlook credentials, customer content, personal information, or private record data by email or through an ordinary support ticket.
2. Connect Outlook
- Start with the Microsoft 365 connection in the intended Seedling workspace. If it is unavailable, contact Seedling support before creating credentials.
- Verify the immutable Entra tenant ID and tenant admin consent for the exact application-role bundle.
- In Microsoft Graph Explorer, run GET /v1.0/users/{mailbox-email}?$select=id,displayName,userPrincipalName and copy the response's immutable id.
- Add that id as the Outlook mailbox source, choose Mail, Primary calendar, or both, and confirm Seedling accepts it before the first sync. Do not enter the email address as the source ID.
- After the first sync, open the Outlook connection's Content access section and confirm it says Permissions from source. The mailbox user must have an active Seedling membership with the same verified email address. Calendar recipients and delegates must also match an active member or a synchronized Microsoft group.
- Add each Outlook source separately and confirm Seedling accepts the exact Microsoft ID before synchronization.
3. Authorization and connection problems
- Setup unavailable
- Microsoft 365 or Outlook is not available for this Seedling workspace. Contact Seedling support; delegated user access is not a fallback.
- Member cannot read Outlook content
- Confirm the member matches the active mailbox user or a current Microsoft calendar share/delegate. Free/busy-only and title/location-only calendar roles do not grant access to Seedling's full event record, and shared-mailbox Full Access delegates are not exposed by Microsoft Graph.
4. Missing or delayed data
- Identify whether Mail or Calendar is enabled for the exact source.
- Review resource scoping, license state, retention, recurrence, and retry warnings.
- Allow incremental synchronization and provider retry handling to complete. A temporary provider failure does not delete previously synchronized data.
- If the issue remains, contact support@tryseedling.ai with the Seedling workspace, safe timestamps, and non-sensitive provider record identifiers. Do not include credentials or record contents.
5. Rotate or replace access
Never use email or an ordinary support ticket to transfer the old or replacement credential.
- Rotate the exact Entra application credential without changing the immutable tenant or application identity.
- Retain only the approved Mail, Calendar, and directory application roles.
- Verify the replacement certificate and the same selected sources before retiring the previous credential.