OAuth scopes allow us to specify exactly how an app needs to access a user's monday.com and Microsoft 365 accounts.
Scopes for Microsoft 365
Details of the OAuth required for Microsoft 365 can be found here: Microsoft 365 permissions & admin consent explanation
Scopes for monday.com
Scopes used
| Scope | Description | Why used |
|---|---|---|
me:read | Read a user's profile information | Used by data export automations to display user data |
boards:read | Read user's boards data | Used by data export automations: Export to Word – Templated document generation; Export to HTML email - Templated email generation; Export board data to Excel |
boards:write | Modify user's boards data | Used by data import automations: Import board data from Excel |
workspaces:read | Read user's workspaces data | |
users:read | Read the profile information of the users on the account | Used by data export automations to populate the data for columns of type People |
account:read | Read general information about the account | Used by data export automations to display account data |
updates:read | Read updates and replies the user can see | Used by Export/sync files attached to updates into the SharePoint folder for an item |
updates:write 1 | Write updates the user can see | Used to add an Outlook email to item updates |
assets:read | Read information of assets that the user has access to | Used by Secure Embed; Export/sync files attached to updates into the SharePoint folder for an item |
teams:read | Read information about teams in the account | Used by data export automations to populate the data for columns of type People |
Scopes not used
| Scope | Description |
|---|---|
docs:read | Read user's docs |
docs:write | Modify user's docs |
workspaces:write | Modify user's workspaces data |
users:write | Modify the profile information of the users on the account |
notifications:write | Send notifications on behalf of the user |
tags:read | Read the tags of the account |
webhooks:write | Create and modify webhooks |
webhooks:read | Read existing webhooks configuration |
Updates to monday.com permissions
From time to time, as the functionality of the app expands, we need to expand the permissions that the app requires.
A list of recent changes to permissions:
1 July 15, 2026
Added:
updates:write- Used by Import Outlook email message into item's updates automation block
These permissions are only used with your consent and only for the user account that granted them.
What happens when new permissions are added?
- Existing automation blocks will retain the old permissions, and continue to work using the old permissions
- New automation blocks which use the new permissions will need to be authenticated with monday.com to pick up the new permissions
- The new permissions will require approval by a monday.com administrator.
How to update app permissions:
If the app currently has different permissions to those described above, a monday.con administrator can fix this by approving the app at https://youraccountname.monday.com/marketplace/v2/app/listing/10000076/microsoft-365-sharepoint-outlook-integration-m365app#permissions where youraccountname is unique to your monday.com account.