Guides · For Microsoft Entra admins

Approve Don't Double Book Me in Microsoft Entra

Someone in your organization tried to connect their Outlook calendar to Don't Double Book Me and Microsoft asked for admin approval. This guide covers what the app does, the permissions it requests, and the three ways to grant consent. It takes about five minutes.

Not an admin? Read what to do when Microsoft says "Approval required" instead.

What Don't Double Book Me Does

Don't Double Book Me keeps a person's calendars in sync so they don't get double booked. When an event is added to one calendar, a matching busy block is created on the other. It works across Microsoft Outlook and Google Calendar, and it's used by people who juggle a work calendar and a personal one.

A few things worth knowing before you review the permissions:

  • Delegated permissions only. The app acts as the signed-in user and can only reach that user's own calendars. It requests no application permissions, so it cannot read other mailboxes or run without a user.
  • No event details are stored. Events are synced directly between calendars. OAuth tokens are encrypted at rest with AES-GCM.
  • Privacy controls are built in. Synced events can be written as "Busy" with no title or description, so work details never leave the work calendar.

Permissions Requested

These are the Microsoft Graph permissions you'll see on the consent screen and why each one is needed.

Permission Shown in Entra as Why it's needed
Calendars.ReadWrite Have full access to user calendars Read the user's events and create, update, or remove the busy blocks it syncs.
MailboxSettings.Read Read user mailbox settings Read the mailbox time zone so working hours and event times line up correctly.
User.Read Sign in and read user profile Identify the account by name and email so the user can tell their connections apart.
offline_access Maintain access to data you have given it access to Keep syncing in the background without asking the user to sign in again.
openid, profile, email Sign users in, view users' basic profile, view users' email address Standard sign-in scopes.

Option 1: Approve a Pending Request

If your tenant has the admin consent workflow turned on, the person who hit the prompt was able to submit a request with a justification. Reviewers get an email, and the request also shows up in the Entra admin center.

  1. Sign in to the Microsoft Entra admin center as a Cloud Application Administrator or higher.

  2. Go to Entra IDEnterprise appsAdmin consent requests.

  3. Open the My pending tab and select Don't Double Book Me.

    You'll see who asked, their justification, and the permissions listed above.

  4. Select Review permissions and consent, then Accept on the consent screen.

    Microsoft emails the requester that their request was approved.

Option 2: Grant Consent from Enterprise Applications

Use this when Don't Double Book Me already appears in your tenant's application list. It shows up there once a user has attempted to sign in, or after any admin has granted consent.

  1. In the Entra admin center, go to Entra IDEnterprise appsAll applications.

  2. Search for Don't Double Book Me and open it.

  3. Under Security, select Permissions.

  4. Select Grant admin consent for [your organization], sign in if prompted, and select Accept.

Option 3: Grant Consent with a Link

If the app doesn't appear in your tenant yet, or you'd rather skip the portal, open this link while signed in as an admin. It's the same consent screen the portal shows, and it works in any tenant.

https://login.microsoftonline.com/organizations/adminconsent?client_id=bbbf0226-3192-45a2-a46f-eb9d201f568b

Review the permissions, tick Consent on behalf of your organization if it's shown, and select Accept.

Limit Who Can Use It

Tenant-wide consent lets any user in your organization connect their own calendar. To restrict it to specific people or a group:

  1. Open Don't Double Book Me under Enterprise appsAll applications.

  2. Under Manage, select Properties, set Assignment required? to Yes, and save.

  3. Under Manage, select Users and groups and add the people or groups who should have access.

After You Approve

Consent takes effect right away. The person who asked can go back to Don't Double Book Me, choose Sign up with Microsoft or Add Microsoft Outlook account again, and sign in. They won't see the admin approval prompt anymore. Each user still connects their own account, so nothing is synced until they set it up.

To revoke access later, open the app under Enterprise apps, go to Permissions, and remove the grant, or delete the application from your tenant. Users can also disconnect their own account from within Don't Double Book Me at any time.

Questions?

If your security review needs anything else, such as details about how tokens are handled or a copy of our privacy policy, contact us and we'll get back to you quickly.