For IT administrators managing a Microsoft 365 tenant: this guide walks you through everything required to enable the ProjectMark Outlook integration for your organization. It covers granting admin consent for Email Sync, verifying the connection, and optionally deploying the ProjectMark Outlook Add-in to your users.
Overview
ProjectMark uses two separate Microsoft integrations. Both may require action from a Microsoft 365 or Entra ID administrator before users can connect.
- Email Sync (Microsoft Graph OAuth) — Syncs mail, calendar, and contacts between Outlook and ProjectMark. Requires admin consent once per tenant.
- Outlook Add-in — Embeds the ProjectMark CRM panel in the Outlook reading pane. Deploy from Microsoft AppSource (optional but recommended).
If your users see "Need admin approval" or "Your administrator hasn't approved this app" when connecting Outlook, start with Part 1 below.
Why ProjectMark doesn't appear in "Generally available apps"
In Microsoft 365 Admin Center → Settings → Integrated apps, ProjectMark will not appear under Generally available apps until an administrator explicitly approves it. This is expected behavior — ProjectMark is a third-party multi-tenant Azure AD application. Once admin consent is granted, it moves to Configured apps.
Part 1 — Email Sync: Grant admin consent
Who can do this
A user with one of the following roles in your Microsoft Entra tenant:
- Global Administrator
- Privileged Role Administrator
- Cloud Application Administrator
How to grant consent
Send this link to your Microsoft 365 administrator. They sign in and click Accept once — consent applies to the entire organization:
Grant admin consent (all tenants)
For enterprise tenants, use this tenant-specific variant instead. Replace {TENANT} with your tenant ID or domain (e.g. contoso.onmicrosoft.com):
Grant admin consent (tenant-specific)
After the admin completes the flow, the browser redirects to ProjectMark. A success or error landing page is normal — the consent is already recorded in your tenant.
Permissions granted
All permissions are delegated (per-user). Admin consent means your users won't receive individual approval prompts when they connect.
- Mail.ReadWrite — Read and associate emails with CRM records
- Mail.Send — Send email from ProjectMark on behalf of the user
- Calendars.ReadWrite — Sync calendar events
- Contacts.ReadWrite — Sync contacts and personnel
- User.Read — Identify the signed-in user
- People.Read — Enrich contact data from Outlook
- OnlineMeetings.Read / ReadWrite — Meeting integration
- offline_access, openid, profile, email — Standard OAuth sign-in
Verify consent succeeded
- Go to Microsoft Entra admin center.
- Navigate to Identity → Applications → Enterprise applications.
- Search for ProjectMark. You can also filter by Application ID
8567de1c-47e2-460c-840f-305df72ea306. - Open the app → Permissions → confirm Admin consent granted shows Yes for your organization.
Alternatively, in Microsoft 365 Admin Center: go to Settings → Org settings → Integrated apps and look for ProjectMark under Configured apps.
What users do after consent is granted
Each user connects their own mailbox independently:
- Log in to ProjectMark.
- Go to Settings → Integration → Email Sync.
- Select Integrate with Microsoft Outlook.
- Sign in with their Microsoft 365 account and accept the permissions prompt.
Part 2 — Outlook Add-in: Deploy to your organization
The ProjectMark Outlook Add-in is available on Microsoft AppSource.
Deployment steps
- Go to Microsoft 365 Admin Center.
- Navigate to Settings → Integrated apps → Get apps.
- Search for ProjectMark CRM.
- Select the add-in and click Deploy.
- Choose Entire organization or select specific users or groups.
Note: The add-in requires users to have Email Sync configured (Part 1) for full functionality.
Troubleshooting
"Need admin approval" or error AADSTS65001
Admin consent has not been granted. Complete Part 1 above.
Admin already approved but users still see the error
- Confirm the admin used the correct tenant — multi-tenant organizations may have more than one.
- Check Enterprise applications in Entra for the ProjectMark app entry.
- Ask the affected user to sign out of Microsoft completely and retry the Email Sync connection.
Conditional Access blocks sign-in (AADSTS53000 / AADSTS50076)
Your tenant's Conditional Access policies may be blocking third-party apps. Work with your security team to allow the ProjectMark enterprise application for users who need Email Sync.
Expired or revoked token (AADSTS50173)
The user changed their password or an admin revoked sessions. The user must remove and re-connect Email Sync in ProjectMark Settings.
Add-in not visible in Outlook
- Confirm the admin deployed the add-in from AppSource (Part 2 above).
- Users may need to restart Outlook or wait up to 24 hours for the deployment to propagate.
- In Outlook, go to Get Add-ins → My add-ins — ProjectMark CRM should appear under Admin-managed.
Need help?
Contact ProjectMark support at support.projectmark.com.
