Setup

Create or sign into your Microsoft 365 account

To integrate with Microsoft Office 365, you'll need to sign in using an educational or enterprise account that has Global Administrator permissions on the tenant.

Connect your Microsoft 365 tenant to Hyphen

Sign in with your Microsoft 365 administrator account
Grant the required admin consent for the application
Select the Microsoft 365 tenant you wish to connect

That's it! After you've completed these steps, Hyphen will automatically:

Verify the credentials and selected tenant
Grant necessary permissions to the Hyphen service

Required Admin Consent Permissions

During the authentication process, Hyphen will request the following permissions:

Application.ReadWrite.All
User.Read
AppRoleAssignment.ReadWrite.All
CrossTenantInformation.ReadBasic.All

These permissions are required to:

Create the Hyphen service principal
Assign application roles to the service principal
Read tenant and organizational information
Obtain tenant information by ID

Microsoft Graph API Permissions Granted by Hyphen

Once the user is authenticated, Hyphen will automatically create a service principal in your tenant and consent the following Microsoft Graph permissions on your behalf:

Directory.Read.All
Group.ReadWrite.All
User.Read.All
Channel.Create
ChannelMember.ReadWrite.All
ChannelSettings.Read.All
Team.ReadBasic.All

These permissions are necessary to:

Manage Azure AD groups and users
Read organization and tenant information
Create and manage distribution lists
Synchronize team membership with Office 365 groups

These permissions enable Hyphen to create and manage Microsoft 365 groups and users on your behalf.

Configuration

Field	Type	Description
`azureTenantId`	`string` (required)	Azure Tenant ID provided by the user for authentication purposes.
`name`	`string`	Display name pulled during integration setup for reference purposes.

Connections

Distribution List

Distribution list connections link to existing Azure Groups or create a new group if none is provided.

When creating a new group, the name will match the Hyphen Organization, Team, Project, App, or Project Environment name.

Configuration

Field	Type	Description
`groupId`	`string`	Unique group ID in Azure, used for reference and future calls.
`groupName`	`string`	Group name in Azure, used for display and future requests.
`emailAddress`	`string`	Group email address in Azure, used for display.

Connection Input

Provide the Azure group ID to connect to an existing Group.

Verification

A verification email will be sent to the group email address to confirm ownership for existing groups.

Access

A Member connection will be added as a member when included in the group.

User

User connections link to existing Azure Users. If no input is provided, the member email will be used to search for an existing User.

Configuration

Field	Type	Description
`userId`	`string`	Unique user ID in Azure.
`email`	`string`	Unique user email in Azure.

Connection Input

Provide the Azure user email to connect to an existing User.