OAuth scopes used for service integrations

JEMH Cloud can be integrated with third-party services to provide enhanced functionality. This integration is typically authorized by using the OAuth open standard mechanism.

OAuth scopes limit an apps access to a users account. When configuring an integration between JEMH Cloud and a third-party service, the user will be shown a consent screen from that service so that the permissions the scope grants can be reviewed.

Services

Google (SMTP, POP, IMAP)

Integration direction	Scope code/URL	Description

Integration direction	Scope code/URL	Description
Inbound and outbound	`https://mail.google.com/`	Full access to the account (message read, write, delete)
Inbound and outbound	`https://www.googleapis.com/auth/userinfo.email`	View email address of account

Microsoft 365 (Graph)

Integration direction	Scope code/URL	Description

Integration direction	Scope code/URL	Description
Inbound and outbound	`offline_access`	Grants app access to resources on behalf of the user for an extended time
Inbound and outbound	`https://graph.microsoft.com/User.Read`	Read the profile of the signed-in user
Inbound	`https://graph.microsoft.com/Mail.ReadWrite`	Create, read, update, and delete email in user mailboxes
Outbound	`https://graph.microsoft.com/Mail.Send`	Send email as user

Slack

Integration direction	Scope code/URL	Description

Integration direction	Scope code/URL	Description
Outbound	`identify`	Allows application to confirm user identity
Outbound	`channels:read`	View basic information about public channels in a workspace
Outbound	`groups:read`	View basic information about private channels that the slack app has been added to
Outbound	`chat:write:bot`	Send messages as the slack app

Legacy services

Microsoft (EWS)

Integration direction	Scope code	Description

Integration direction	Scope code	Description
Inbound	`https://outlook.office365.com/Mail.ReadWrite`	Create, read, update, and delete email in user mailboxes
Outbound	`https://outlook.office365.com/Mail.Send`	Send email as user