Skip to main content
Microsoft 365 lets a Digital Twin reach into OneDrive, SharePoint, Outlook and your Office files on behalf of the people who use it. You set it up per Digital Twin in the admin editor’s Configuration and Integrations tab (Admin › Instances › Edit), in the Microsoft section.
Any administrator who may edit the Digital Twin (the institutions.edit entitlement) can set it up — no help from the Praxis AI team needed.

​
Services and permissions

Tick the Microsoft services the twin may use. Each one asks Microsoft only for the permissions it needs: A service that needs another brings that one with it: ticking SharePoint, Excel, Word or PowerPoint also asks for OneDrive. Every Microsoft connection also asks for sign-in details and offline access, so the twin can refresh its access without asking again.

​
Two ways to connect

With Use Digital Twin identity off, each person connects their own Microsoft account from their profile — see Microsoft Services. The twin acts on that person’s data only.
1

Open the Microsoft section

Admin › Instances, select Edit on the Digital Twin, open Configuration and Integrations and scroll to Microsoft.
2

Turn on Enable Access

Enable Access makes Microsoft available in this Digital Twin. While it is off, members are not offered Microsoft tools, even with their own Microsoft account connected.
3

Choose how people connect

Leave Use Digital Twin identity off, or turn it on for a shared account.
4

Restrict sign-in to your organization (optional)

Set Microsoft tenant (below) when only accounts of one Microsoft organization should connect.
5

Tick the services

Tick the services the twin should use. Outlook Mail can also send email and Outlook Calendar can also change events, so include those two deliberately on a shared account.
6

Connect (shared account only)

Select Connect Microsoft Account and accept the permissions on Microsoft’s consent screen. Disconnect revokes the authorization and clears the saved credentials.
​
string
Restricts sign-in to one Microsoft organization — the tenant domain (for example contoso.onmicrosoft.com) or directory ID. Leave it blank to allow any organization. It applies to the twin’s shared account and to every member who connects their own account in this Digital Twin. Set it when the connecting account is a guest in the organization that holds the content, or when that organization only allows sign-in to its own tenant. The tenant is locked while a connection exists; disconnect first to change it.
A connected shared account takes precedence over any personal Microsoft account a person connected — everyone goes through the shared account. To change the services of a shared account, disconnect and connect again.

​
Approving Pria in your organization

Some Microsoft 365 organizations require an administrator to approve an app before people can allow its permissions. If people see a request for administrator approval on Microsoft’s consent screen, your Microsoft 365 administrator approves Pria for the permissions listed above.

​
Troubleshooting

  • Check that Enable Access is on for the Digital Twin.
  • With a shared account, check that the service was ticked when the account was connected.
  • Without one, each person must connect their own Microsoft account and allow every permission of the service — see Microsoft Services.
If Microsoft tenant is set, only accounts of that organization can connect. Check the value, or clear it while no connection exists.
Microsoft may have revoked or expired the authorization. Select Disconnect, then Connect Microsoft Account again: the new consent gives the twin fresh access.