As an account administrator, you will need to follow some initial steps to grant permissions and enable Space Connect to connect with your room calendars and enable users within your organisation to access Space connect.
Step 1: Create Admin group
Before you can approve the link between SpaceConnect and Exchange you will need to create groups within Active Directory to define who is a system admin.
This is covered in the following article:
Step 2: Login
Navigate to the Space Connect administration portal at https://spaceconnect.azurewebsites.net/admin.
Enter your Office365 Administration Email Address.
Your administration email address may be different from your normal Office365 email address.
Select the sign-in button.
Select the Microsoft button for authentication if it displays.
Step 3: Authenticate
The Microsoft authentication sign-in page will display. Confirm your administration email address and enter the administration email account password.
Step 4: Accept permissions
The SpaceConnectOnline permissions page will display. Select the ‘Accept’ button.
Note: This step may not display if you have previously logged into the Space Connect mobile app or Web Admin Panel.
Step 5: Connect to Exchange
Your Space Connect company homepage will display.
You will need grant permission consent for the Space Connect app to allow users from your company to use Space Connect. It also ensures Space Connect can automatically synchronise with your meeting rooms.
Select the ‘Sign in and grant permission’ button.
Step 6: Accept permissions
The SpaceConnectNative permissions page will display. Select the ‘Accept’ button.
You will be redirected back to the portal homepage.
Note: Below is a list of the permissions you are consenting for Space Connect to access and a description of the permissions, as well as why they are needed.
Access mailboxes as the signed-in user via Exchange Web Services
Allows the app to have the same access to mailboxes as the signed-in user via Exchange Web Services.
Why is this needed? This permission enabled Space Connect to view a users calendar (not emails) in order to check their availability, book and edit meetings on their behalf using EWS API's for On Premise accounts.
Use Exchange Web Services with full access to all mailboxes
Allows the app to have full access via Exchange Web Services to all mailboxes without a signed-in user.
Why is this needed? This permission enables Space Connect to access all users and rooms calendars (not emails) to check availability, book and edit meetings using EWS API's for On Premise accounts.
Read and write calendars in all mailboxes
Allows the app to create, read, update, and delete events of all calendars without a signed-in user.
Why is this needed? This permission requested perform activities like automatically cancel and meeting on behalf of a user without them being signed and using their access token to perform the task.
Access the directory as the signed-in user
Allows the app to have the same access to information in the directory as the signed-in user.
Why is this needed? This permission enables Space Connect to access Active Directory as the signed-in user to check their access to room bookings, etc.
Read directory data
Allows the app to read data in your company or school directory, such as users, groups, and apps.
Why is this needed? This permission is used to read Active Directory groups and check the users of those groups to ensure they have permission to perform the functions.
Read all groups
Allows the app to read basic group properties and memberships on behalf of the signed-in user.
Why is this needed? This permission is used to read Active Directory groups and check the users of those groups to ensure they have permission to perform the functions as a signed in user.
Read all users' basic profiles
Allows the app to read a basic set of profile properties of all users in your company or school on behalf of the signed-in user. Includes display name, first and last name, photo, and email address. Additionally, this allows the app to read basic info about the signed-in user's reports and manager.
Why is this needed? This permission enables to capture of the users name and photo to display in the app for the account settings and find a colleague features.
Sign in and read user profile
Allows users to sign in to the app, and allows the app to read the profile of signed-in users. It also allow the app to read basic company information of signed-in users.
Why is this needed? This permission enables to capture of the users name and photo to display in the app for the account settings and find a colleague features as a signed-in user.
If you agree, this app will be granted the specified application permission(s) to resources belonging to all users in your organization, and delegated permission(s) to resources belonging to the signed-in user.