Supported resources
- Outlook mail and drafts
- Outlook calendar
- SharePoint sites and document libraries
- OneDrive files
Authentication
Microsoft Entra ID (OAuth 2.0). Kroy holds the connection; AI clients never receive Microsoft tokens.
Supported actions
| Capability | Type | Default |
|---|
outlook.mail.read
Read mail | read | Policy |
outlook.draft.create
Create draft | write | Policy |
outlook.mail.send
Send mail | write | Human approval |
sharepoint.files.read
Read files | read | Policy |
sharepoint.files.upload
Upload file | write | Policy |
Events
sharepoint.file.createdoutlook.mail.received
Overview
Much of an organisation’s knowledge lives in SharePoint and Outlook. Kroy connects to Microsoft 365 once, then gives each authorised AI exactly the slice a task requires.
Drafts, not sends
A common policy is that AI may prepare external communication but a person sends it. Kroy enforces this at the action level: outlook.draft.create can be permitted while outlook.mail.send requires approval.
Identity
Kroy can use Microsoft Entra ID for sign-in, so the person behind every AI request is a known member of your organisation.
Limitations
- Sending mail requires human approval by default.
- Kroy respects SharePoint permissions; it cannot grant access Microsoft 365 does not.