Permission Controls for Users

Question

HI there,

Just wondering if you could help. We used Pleo in our business and we would like to enable fetch - however most of our employees are receiving this message and Pleo have stated that it's an issue with Microsoft, please can you help us sort this>

Answer 1

Hello!

Pleo is a third party app, so I can't provide the exact fix for it. But here is my explanation for your reference. I hope it's helpful for you.

Actually, the “Fetch” feature in Pleo works by scanning employees’ work email accounts for receipts, and the integration relies on Microsoft 365 permissions when Outlook is used. The error your employees are seeing typically comes from insufficient consent or incorrect role assignments in Microsoft Entra ID. Each user must grant Pleo access to their mailbox, and the admin must ensure that the Pleo app is registered and allowed under Enterprise Applications with the correct API permissions (Mail.Read, Mail.ReadWrite).

In short, this is not a registry or client‑side fix; it requires proper mailbox permissions and admin consent in Microsoft 365. You can ask your company IT to check the employees' permission.

Answer 2

To address the issue with Pleo and the permission controls for users, it is essential to ensure that the appropriate roles and permissions are set up in Microsoft Entra ID. If employees are receiving access-related messages, it could be due to their roles not being configured correctly or lacking the necessary permissions to use Pleo.

Here are some steps you can take:

1. Check User Roles: Ensure that the users have the correct roles assigned in Microsoft Entra ID, such as Application Administrator or Cloud Application Administrator, which are necessary for managing applications like Pleo.
2. Verify SSO Configuration: Make sure that the Single Sign-On (SSO) settings for Pleo are correctly configured in the Microsoft Entra admin center. This includes ensuring that the Identifier and Reply URL are set up properly.
3. Test User Access: Create a test user to verify if the issue persists. This can help determine if the problem is specific to certain users or a broader configuration issue.
4. Contact Support: If the problem continues, consider reaching out to Microsoft support for assistance, as they can provide more detailed insights into permission issues related to Microsoft services.

By following these steps, you should be able to resolve the permission issues your employees are facing with Pleo.

---

References:

• Configure Pleo for Single sign-on with Microsoft Entra ID
• 403 Sorry Access denied error when a user tries to sign in to Outlook Web App in Microsoft 365

AI-generated content may be incorrect. Read our transparency notes for more information.