Skip to main content
The Microsoft (Admin consent) connector provides application-level access to the Microsoft Graph API. A tenant administrator grants consent once for the whole organization, so Ampersand can call Graph without any individual user signing in. Depending on your tenant’s setup, granting consent for application permissions may require an administrator with elevated privileges (such as a Global Administrator). Use this connector for org-wide, app-level access. For access scoped to an individual signed-in user, use the Microsoft connector instead.

​
What’s Supported

​
Supported Actions

This connector supports:

​
Supported Objects

This connector supports many Microsoft Graph API objects including but not limited to: For the complete list, refer to the Microsoft Graph API documentation. To find the exact Application permission each object requires, you can use a tool such as the Graph Permissions Explorer.

​
Before You Get Started

To connect Microsoft services with Ampersand, you will need a Microsoft Account. Once your account is created, you’ll need to create an app in the Azure portal, configure the Ampersand redirect URI within the app, and obtain the following credentials from your app:
  • Client ID
  • Client Secret
You will then use these credentials to connect your application to Ampersand.

​
Creating a Microsoft App

Follow the steps below to create a Microsoft app and add the Ampersand redirect URL.
  1. Log in to your Azure Portal.
  2. Navigate to Microsoft Entra ID (Azure Active Directory) > App registrations.
  3. Click the New registration button.
  4. In the Register an application window, enter the Name and select the Supported account types that fit your scenario — if your customers will connect from their own Microsoft tenants, choose an option that includes multiple organizations. Then click Register.
  5. In the left-hand sidebar, navigate to Manage > Authentication > Add a platform > Web, and enter the Ampersand redirect URL: https://api.withampersand.com/callbacks/v1/custom-auth/default.
  6. In the left-hand sidebar, navigate to Certificates & secrets > New client secret, provide a description and expiration period, and click Add. Note the Client Secret value. You will need it later.
  7. In the left-hand sidebar, navigate to Manage > API permissions > Add a permission > Microsoft Graph > Application permissions, and choose the permissions your integration requires.
You must add Application permissions, not Delegated permissions. Application-level access via admin consent uses application permissions; delegated permissions will not work with this connector.

​
Add Your Microsoft App Info to Ampersand

  1. Log in to your Ampersand Dashboard.
  2. Select the project where you want to create a Microsoft integration.
  3. Select Provider Apps.
  4. Select Microsoft (Admin consent) from the Provider list.
  5. Enter the previously generated Client Secret in the Client Secret field.
  6. For the Client ID field, go to the Overview page in your Microsoft application, and copy the Application ID.
  7. Click Save Changes.

​
Using the connector

To start integrating with Microsoft:
  • Create a manifest file like the example.
  • Deploy it using the amp CLI.
  • If you are using Read Actions, create a destination.
  • Embed the InstallIntegration UI component.
  • Start using the connector!
    • If your integration has Read Actions, you’ll start getting webhook messages.
    • If your integration has Write Actions, you can start making API calls to our Write API.
    • If your integration has Proxy Actions, you can start making Proxy API calls.