> ## Documentation Index
> Fetch the complete documentation index at: https://docs.praxis-ai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft 365

> Connect Microsoft 365 to a Digital Twin so it can work with OneDrive, SharePoint, Outlook mail and calendar, and Office files — for each person, or through one account for the whole twin.

Microsoft 365 lets a Digital Twin reach into OneDrive, SharePoint, Outlook and your Office files on behalf of the people who use it. You set it up per Digital Twin in the admin editor's **Configuration and Integrations** tab (**Admin › Instances › Edit**), in the **Microsoft** section.

<Info>
  Any administrator who may edit the Digital Twin (the `institutions.edit` entitlement) can set it up — no help from the Praxis AI team needed.
</Info>

## Services and permissions

Tick the Microsoft services the twin may use. Each one asks Microsoft only for the permissions it needs:

| Service | What the twin can do | Permissions asked of Microsoft |
| - | - | - |
| **OneDrive** | List, search and import files | Read all files (`Files.Read.All`) |
| **SharePoint** | Find sites, browse libraries, search and import files | Read sites (`Sites.Read.All`). Needs **OneDrive** |
| **Outlook Mail** | Search, read and send mail | Read mail; send mail (`Mail.Read`, `Mail.Send`) |
| **Outlook Calendar** | View, create, change and delete events | Read and manage calendars (`Calendars.Read`, `Calendars.ReadWrite`) |
| **Excel**, **Word**, **PowerPoint** | Read the content of Office files | The OneDrive permission. Need **OneDrive** |

A service that needs another brings that one with it: ticking SharePoint, Excel, Word or PowerPoint also asks for OneDrive. Every Microsoft connection also asks for sign-in details and offline access, so the twin can refresh its access without asking again.

## Two ways to connect

<Tabs>
  <Tab title="Each person connects their own account (default)">
    With **Use Digital Twin identity** off, each person connects their own Microsoft account from their profile — see [Microsoft Services](/mdx/user-guide/profile-settings/microsoft-services). The twin acts on that person's data only.
  </Tab>

  <Tab title="One shared account for the whole Digital Twin">
    Turn on **Use Digital Twin identity** and select **Connect Microsoft Account**: everyone reaches Microsoft through that one account, which an administrator authorizes once. Use it when the twin should work with your organization's own mailbox, OneDrive, SharePoint sites or calendar rather than each person's.
  </Tab>
</Tabs>

<Steps>
  <Step title="Open the Microsoft section">
    **Admin › Instances**, select **Edit** on the Digital Twin, open **Configuration and Integrations** and scroll to **Microsoft**.
  </Step>

  <Step title="Turn on Enable Access">
    **Enable Access** makes Microsoft available in this Digital Twin. While it is off, members are not offered Microsoft tools, even with their own Microsoft account connected.
  </Step>

  <Step title="Choose how people connect">
    Leave **Use Digital Twin identity** off, or turn it on for a shared account.
  </Step>

  <Step title="Restrict sign-in to your organization (optional)">
    Set **Microsoft tenant** (below) when only accounts of one Microsoft organization should connect.
  </Step>

  <Step title="Tick the services">
    Tick the services the twin should use. Outlook Mail can also send email and Outlook Calendar can also change events, so include those two deliberately on a shared account.
  </Step>

  <Step title="Connect (shared account only)">
    Select **Connect Microsoft Account** and accept the permissions on Microsoft's consent screen. **Disconnect** revokes the authorization and clears the saved credentials.
  </Step>
</Steps>

<ParamField path="Microsoft tenant (optional)" type="string">
  Restricts sign-in to one Microsoft organization — the tenant domain (for example `contoso.onmicrosoft.com`) or directory ID. Leave it blank to allow any organization. It applies to the twin's shared account and to every member who connects their own account in this Digital Twin. Set it when the connecting account is a guest in the organization that holds the content, or when that organization only allows sign-in to its own tenant. The tenant is locked while a connection exists; disconnect first to change it.
</ParamField>

<Warning>
  A connected shared account takes precedence over any personal Microsoft account a person connected — everyone goes through the shared account. To change the services of a shared account, disconnect and connect again.
</Warning>

## Approving Pria in your organization

Some Microsoft 365 organizations require an administrator to approve an app before people can allow its permissions. If people see a request for administrator approval on Microsoft's consent screen, your Microsoft 365 administrator approves Pria for the permissions listed above.

## Troubleshooting

<AccordionGroup>
  <Accordion title="People don't see Microsoft tools">
    * Check that **Enable Access** is on for the Digital Twin.
    * With a shared account, check that the service was ticked when the account was connected.
    * Without one, each person must connect their own Microsoft account and allow every permission of the service — see [Microsoft Services](/mdx/user-guide/profile-settings/microsoft-services).
  </Accordion>

  <Accordion title="People can't connect their account">
    If **Microsoft tenant** is set, only accounts of that organization can connect. Check the value, or clear it while no connection exists.
  </Accordion>

  <Accordion title="A shared connection stops working after a while">
    Microsoft may have revoked or expired the authorization. Select **Disconnect**, then **Connect Microsoft Account** again: the new consent gives the twin fresh access.
  </Accordion>
</AccordionGroup>

## Related

* [Microsoft Services (user guide)](/mdx/user-guide/profile-settings/microsoft-services) — how people connect their own accounts
* [Google Workspace](/mdx/admin-guide/google-workspace) — the same setup for Google
* [Configuration](/mdx/admin-guide/configuration) — the rest of the Digital Twin editor
* [Tools](/mdx/admin-guide/tools) — the tools that act on connected services


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.