Outlook Plugins Need Granular Permission Controls at Installation

Title: Outlook Plugins Need Granular Permission Controls at Installation

I recently discovered that Outlook plugins like ChatGPT and Claude request broad Microsoft Graph permissions — including Contacts.Read — without showing users what they’re actually granting. There’s no permission review screen, no toggle, and no way to restrict access during installation.

To block access to Contacts, I had to dig through: Entra → Enterprise Applications → Permissions → Remove Contacts scopes This is not something the average user will ever find or understand.

Microsoft should give us permission control at the moment we install a plugin. A simple screen showing:

• Mail permissions
• Calendar permissions
• Contacts permissions
• People graph permissions
• File permissions

…with the ability to approve or deny each one.

Even better: a “Mail + Calendar only” privacy mode.

This would make Outlook plugins far safer and far more user‑friendly. Right now, the process is buried way too deep for normal users.

Would love to see Microsoft address this.

— RexB