What are the permissions required to deploy the add-in

Required Role

Only administrators holding the Exchange Administrator role can access the Exchange admin center and manage add-in deployment.

1⃣ What permissions are required?

Without “Permissions” the manifest import fails with the message: "Error: unable to install the manifest."

To cover all use cases related to add-in functionalities, the following permission is required:

• ReadWriteMailbox : This permission grants the add-in permission to use these Microsoft API features:

  • setSignatureAsync : Signature insertion

  • addBase64FileAttachmentAsync : Adding embedded images

Without ReadWriteMailbox we will encounter errors such as the following:

• ReadItem : Error during the call to setSignatureAsync

  

• ReadWriteItem : Error during the call to addBase64FileAttachmentAsync

  

2⃣ Why do we request these permissions?

The Signitic add-in intervenes when composing an email, to automatically insert a personalized signature. This action requires read and write access to the active message.

The ReadWriteMailbox permission allows for:

• Dynamic insertion of the signature in the body of the email

• Integration of embedded images (logos, banners)

• A seamless experience, without manual action from the user

This permission is therefore essential for the proper functioning of our application and is under no circumstances used for malicious purposes. The code is regularly reviewed by Microsoft and is executed in a secure and Microsoft-controlled environment.