If you choose to store the templates in your personal mailbox (personal edition) the following permissions are required:

• Sign you in and read your profile: This is the general permission to allow you to sign into Microsoft 365.
• Read and write access to your mail: The personal store is a hidden folder in your Microsoft 365 mailbox therefore the plugin needs to be able to write and read email messages and subfolders of that folder. No other email folders are read or modified.
• Maintain access to data you have given it access to: Microsoft permissions are seperated into access and refresh tokens. The access token is the first token you get and requires you to login. The refresh token then lets the plugin tell Microsoft it is still working on your behalf (i.e. preparing or sending a mail merge) and get a refresh token to give the plugin continued access. This permission lets us get a refresh token without asking you every couple of minutes while you are sending a mail merge campaign. Despite what the permission indicates the token is never transferred outside of your Outlook instance and therefore as soon as you close the plugin or Outlook you will be asked to login again and no operations can occur when the plugin is not loaded.

Add files from your hard disk If you choose to store the templates in a Microsoft 365 group’s drive (team edition) the following permissions are required:

• Sign you in and read your profile: This is the general permission to allow you to sign into Microsoft 365.
• Read all groups: In order to list the groups you are a member of, the plugin needs to be able to read these.
• Full access to your files: The team edition stores templates in the drive of the Microsoft 365 group (also known as the “SharePoint Document Library” or “OneDrive for Business Drive”). Therefore the plugin needs to be able to read and write files in those drives. The plugin will always create a new root folder called TemplateManager365 to store the templates and only ever read or write files in that folder.
• Maintain access to data you have given it access to: Microsoft permissions are seperated into access and refresh tokens. The access token is the first token you get and requires you to login. The refresh token then lets the plugin tell Microsoft it is still working on your behalf (i.e. preparing or sending a mail merge) and get a refresh token to give the plugin continued access. This permission lets us get a refresh token without asking you every couple of minutes while you are sending a mail merge campaign. Despite what the permission indicates the token is never transferred outside of your Outlook instance and therefore as soon as you close the plugin or Outlook you will be asked to login again and no operations can occur when the plugin is not loaded.