Skip to main content
If your organization requires admin approval for third-party apps, your team can’t sign in to Owlery until you approve it. Approving takes a few minutes, and you only do it once.

​
What Owlery Asks For

Owlery uses Microsoft or Google only to sign people in. It reads each user’s name and email address, and nothing else. Every permission is delegated: it applies only to the person signing in. Owlery can’t read anyone’s mail, files, or calendar, and it never sees or stores passwords. These are the only permissions Owlery requests. None of them are high-privilege. If your organization asks for admin approval for Owlery, it’s because it requires it for every app, not because of anything Owlery requests.

​
Microsoft Entra ID (Microsoft 365)

Use an admin account that can approve apps, such as Global Administrator or Cloud Application Administrator.
1

Open the approval link

Approve Owlery in Microsoft Entra ID, and sign in with your admin account.
2

Review and accept

Check that the app is Owlery.ai, published by Owlery Inc with Microsoft’s verified publisher badge, and that the permissions match the table above. Click Accept.
Owlery is now approved for everyone in your organization, and no one else is asked to approve it. If you’d rather work in the admin center, someone in your organization has to try signing in to Owlery first. Then go to Microsoft Entra admin center → Enterprise applications → Owlery.ai → Permissions and click Grant admin consent. The app’s client ID is 9cf42718-adc2-47cd-8a8d-8cf742678669.

​
Limit Access to Specific People (Optional)

By default, anyone in your organization can sign in once Owlery is approved. To allow only certain people or groups:
  1. Go to Microsoft Entra admin center → Enterprise applications → Owlery.ai → Properties, set Assignment required? to Yes, and click Save.
  2. Go to Users and groups and add the people or groups who should have access.
For details, see Microsoft’s guide to managing users and groups for an application.

​
Google Workspace

Use a Google Workspace super admin account.
1

Open API controls

In the Google Admin console, go to Security → Access and data control → API controls, then click Manage Third-Party App Access.
2

Find Owlery

Click Configure new app, then search for Owlery’s client ID:
Select Owlery from the results.
3

Choose who gets access

Choose your whole organization, or limit access to specific organizational units or groups.
4

Set access to Trusted

Select Trusted. Owlery only requests basic sign-in information, so this doesn’t give it access to any other Google data.
If a user was blocked and sent you an access request, you can approve it instead. See Google’s guide to reviewing third-party app access requests.

​
Security and Compliance

Owlery runs on enterprise-grade infrastructure with encryption at rest and in transit. It stores only each user’s name, email address, and an internal ID. For security controls, subprocessors, and common questions, see the Trust & Security Center.