Maximizer CRM for Outlook – Integration Permissions

Maximizer CRM for Outlook follows the principle of least-privilege access and only requests the minimum Microsoft Graph permissions required to support its core functionality. The application operates strictly within the scopes explicitly granted by your organization’s administrator.

Maximizer does not access, process, or store data outside of these approved permissions. No background or unauthorized data collection occurs. All data interactions are either initiated by the end user (e.g., saving an email) or performed through explicitly configured synchronization processes.

Administrators retain full control at all times and can review or revoke access via Microsoft controls. Maximizer adheres to industry-standard security, privacy, and data protection practices to ensure that your organization’s information remains secure and fully governed by your policies.

API permissions required by the Maximizer CRM app for Outlook

The new Maximizer app for Outlook requires the following minimum permissions, which cannot be excluded:

• User.Read – Allows user sign-in and grants access to the signed-in user’s profile, including basic company information.
• Mail.ReadWrite – Grants permission to create, read, update, and delete emails in user mailboxes (excluding the ability to send emails). This is essential for authenticating and saving emails from a user’s inbox to the Maximizer database. (This is the permission we added last week.)

Note: The app does not require full Graph API access but only the two scopes mentioned above. These permissions are the minimum necessary for the app to function, enabling it to compare email recipients with Maximizer contacts and save Outlook emails to Maximizer. A Microsoft admin can revoke the access at any time.

 

API permissions required to sync data between Outlook and Maximizer

To use the data-syncing capabilities between Outlook and Maximizer, the following permissions are required:
 

Note: Syncing capabilities are installed alongside the 'Maximizer CRM app for Outlook' and request their required scopes separately.

Application Registration

Two separate Microsoft applications must be registered and configured with the appropriate permissions:

• Outlook Add-in Application
  Registered as “Maximizer AI CRM for Outlook”

• Outlook Sync Application
  Registered as “Maximizer Outlook Sync”
  This application requires an OAuth redirect URI to enable authentication.

  • OAuth Redirect URI:
    https://appstoresrv.maximizer.com/appstore/midwareolsync2/olsync2
     

For more details, refer to the Microsoft Graph Permissions Reference.

Next to Explore

• Microsoft Outlook Integration – Overview (Maximizer CRM app for Outlook)
• Microsoft Outlook Integration – Installation (Maximizer CRM app for Outlook)
• Microsoft Outlook Integration – Getting Started Guide (Maximizer CRM app for Outlook)