Skip to main content

Hi everyone,

 

Our sales team wants to use Outlook Integration to sync Contacts and Events from Outlook to Salesforce.

 

We started to configure Lightning Sync to enable this in our Classic Sales Org - our MS Exchange Email Admin helped log in with the global admin access, however when coming to the step "Permissions requested Review for your organization" our IT management team has issues with the level of access required, specifically:

 

"This app would like to "Use Exchange Web Services with full access to all mailboxes: "Allows the app to have FULL ACCESS via Exchange Web Services to ALL MAILBOXES without a signed-in user."

 

Our Admin and Security team have concerns with allowing this level of access to Exchange (full access to all mailboxes without a signed-in user) and we won't be able to activate this for the users to sync Contacts and Events unless there's a solution available that does not require FULL access to ALL mailboxes.

 

Salesforce Support has informed me that both Lightning Sync and Einstein Activity Capture both require Full access to All mailboxes for this functionality - is this true, or are there any workarounds or any other suggestions? There was a brief mention of third-party apps however the organization most likely does not want to pay additional per-user costs for this. Is there an out of the box solution within Salesforce? Or is there a best recommended free third-party app to achieve this?

 

Given recent cybersecurity breaches in the news the company does not want to allow Full access to all employees' inboxes to activate this feature when only a small subset of employees will use this!

 

Thanks!

Dan

1 commento
  1. 24 feb 2021, 08:42
    Hi @Dan Pearce

    EAC is only available in LEX, so this would not be a viable solution here anyway, although it does offer a user-connection oAuth, which resolves this access issue. Potentially you could use the service account connection method, which allows you to scope the access to the exchange server to a list of users you specify. Not sure if you meet the tech requirements though:

    https://help.salesforce.com/articleView?id=sf.lightning_sync_admin_exch_connect_w_service_acct.htm&type=5

    There would be no other out of the box functionality available in Salesforce.

0/9000