SOP: Enabling Microsoft 365 User Consent for HubSpot Integration

Prerequisites

• Access to the Microsoft Entra admin center (formerly Azure Active Directory).

• Global Administrator or equivalent role in Microsoft 365.(learn.microsoft.com, learn.microsoft.com)

Step-by-Step Instructions

1. Allow User Consent for Verified Applications

Enabling this setting permits users to consent to applications from verified publishers, such as HubSpot, for selected permissions.(learn.microsoft.com)

• Sign in to the Microsoft Entra admin center as a Global Administrator.

• Navigate to Entra ID > Enterprise applications > Consent and permissions > User consent settings.

• Under User consent for applications, select:

  • "Allow user consent for apps from verified publishers, for selected permissions".

• Click Save to apply the changes.(learn.microsoft.com, learn.microsoft.com, knowledge.hubspot.com)

Reference: Configure how users consent to applications

2. Enable Admin Consent Workflow (Optional)

If you prefer to maintain stricter control over app permissions, you can enable an admin consent workflow, allowing users to request approval for applications they cannot consent to themselves.(learn.microsoft.com)

• In the Microsoft Entra admin center, go to Entra ID > Enterprise applications > Consent and permissions > Admin consent settings.

• Under Admin consent requests, set "Users can request admin consent to apps they are unable to consent to" to Yes.

• Assign reviewers who will receive and manage these requests.

• Configure email notifications and request expiration settings as needed.

• Click Save to implement the workflow.(learn.microsoft.com)

Reference: Configure the admin consent workflow

3. Grant Tenant-Wide Admin Consent to HubSpot

To streamline the integration process, you can grant admin consent to HubSpot on behalf of your organization.

• In the Microsoft Entra admin center, navigate to Entra ID > Enterprise applications > All applications.

• Search for HubSpot and select the application.

• Under Security > Permissions, review the requested permissions.

• Click Grant admin consent to approve the permissions for all users.(learn.microsoft.com)

Reference: Grant tenant-wide admin consent to an application

4. Verify Application Registration Settings

Ensure that users can register applications if necessary for the integration.(learn.microsoft.com)

• In the Microsoft Entra admin center, go to Entra ID > User settings.

• Under App registrations, set "Users can register applications" to Yes.

• After users have successfully connected their inboxes, you may revert this setting to No to maintain security.(community.hubspot.com, community.hubspot.com)

Reference: Managing user consent to apps in Microsoft 365

Confirmation

After completing these steps, users should be able to connect their Outlook inboxes to HubSpot without encountering permission errors. If issues persist, consider reviewing the specific error messages and consulting the relevant Microsoft documentation for further troubleshooting.

For more detailed information, please refer to the Microsoft documentation on Managing user consent to apps in Microsoft 365.(learn.microsoft.com)