Microsoft Outlook OAuth2 API - Least permissions

[EvDevWo]

Hi all,

I’m trying to configure the Microsoft Outlook OAuth2 API in n8n. When setting it up, it asks for a large set of delegated permissions, for example:

• Sign in as you

• Maintain access to data you have given it access to

• Read your contacts

• Have full access of your contacts

• Read your calendars

• Read calendars you can access

• Have full access to your calendars

• Read and write access to your mail

• Read and write mail you can access

• Send mail as you

• Send mail on behalf of others or yourself

• Read your mailbox settings

For my use case I only want the delegated permission such as:

• Send mail as you

But n8n (or the API setup) seems to automatically request the full set of Outlook/Microsoft Graph scopes.

Thanks!

[moosa]

It is because app which n8n has created is for all use cases.
you can use these same credentials (keys) to do other stuff too.
if you want one specific permissions you need to create your own app.

[EvDevWo]

Hi @moosa thanks for your answer. I run N8N locally so i have my own Azure App Registration with only mail.send but still i get the question for all the permissions. Is this what you mean?

[moosa]

ooh I see, by default n8n asks for all permissions.
what you can do is create new credentials:

and give required scope:

hope this addresses your concern!

[moosa]

then send mail using: