Additional Microsoft Entra services and features related to identity, access, and network security
Access to the Outlook Salesforce integration (Salesforce add-in) is controlled either by:
- The Salesforce side (connected app and integration user), and
- Microsoft Entra ID / Microsoft 365 policies and app assignments.
Without an admin account in Microsoft Entra ID, access cannot be granted directly. The required steps must be done by an administrator.
Provide the following actions to the appropriate admin (Microsoft 365/Entra and Salesforce):
- Verify Salesforce connected app permissions
- In Salesforce, sign in as a Salesforce admin.
- Go to Setup > Platform Tools > Apps > Connected Apps > Managed Connected Apps.
- Select the Sales Connected App (the Outlook/Salesforce integration app).
- Under Custom Connected App Handler, ensure Run As is set to the correct integration user (for example, Sales Integration User).
- Go to Administration > Users > Users and confirm that the integration user’s profile is the expected integration profile (for example, CopilotForSalesIntegrationProfile).
- Ensure the user account that needs Outlook–Salesforce integration is allowed to use this connected app.
- Ensure the app is available in Microsoft 365/Outlook
- If the Salesforce add-in is deployed centrally, a Microsoft 365/Entra admin must assign or deploy the add-in to the user’s mailbox (for example, via Exchange add-in deployment or by allowing users to add the app themselves).
- If users are allowed to add apps individually, confirm there is no policy blocking this user specifically.
- If errors occur when accessing Salesforce from Outlook
- If the user sees “Access denied for this user” or “User doesn't have admin permission to access the connected app” when using the Outlook integration, the Salesforce admin must correct the connected app configuration and integration user permissions as described in step 1.
Because there is no admin access to Microsoft Entra, the only practical path is to contact the organization’s Microsoft 365/Entra admin and Salesforce admin and have them:
- Confirm the Salesforce connected app and integration user are configured correctly.
- Confirm the Outlook Salesforce add-in is deployed or allowed for the user.
References: