Before users in your organization can connect Claude to their email, calendar, and files, someone needs to configure the Microsoft 365 connector. This guide covers what needs to be done, and how to enable Claude to send emails.
Are you a user who just wants to connect? See the user guide.
Until this configuration is complete, users cannot connect.
What You Need
- A Microsoft 365 tenant (your organization's Microsoft Entra tenant) tied to a Microsoft Business plan.
- A Claude Team or Enterprise plan for the configuration described here. The connector is also available on Free, Pro, and Max plans: there is no owner step in those cases, but Entra consent is still required.
- A Global Administrator account in Microsoft Entra.
Who Does What
- Claude organization owner: enables the connector for the organization, then unlocks the write tools.
- Microsoft Entra Global Administrator: grants consent on behalf of the organization.
- Each user: connects their own account, as explained in the user guide.
These roles can be held by one person or several. In a small business, the Claude owner is often also the Entra administrator. What matters is that no step is missed.
Step 1: Enable the Connector in Claude
An organization owner opens Organization Settings › Connectors › Browse Connectors, then adds Microsoft 365.
Step 2: Grant Consent in Entra, Once
The straightforward path. The Global Administrator connects to the connector themselves and checks the on behalf of the organization box at the consent prompt.
The manual path, in Entra. The administrator approves the connector's two applications:
- M365 MCP Client for Claude:
08ad6f98-a4f8-4635-bb8d-f1a3044760f0 - M365 MCP Server for Claude:
07c030f6-5743-41b7-ba00-0a6e85f37c17
Once consent is granted, users can connect without seeing a consent prompt. At this point, the connector is read-only.
Step 3: Enable Email Sending: Two Actions
The write tools cover sending and forwarding emails, drafts, calendar, OneDrive and SharePoint files, and Teams messages. For an organization that was already using the connector, they are blocked by default.
Action 1: Re-approve permissions in Entra. If your tenant granted consent before the write tools launched, the permission set has changed since then. A Global Administrator must re-approve the updated set under Enterprise Applications › Consent.
Action 2: Unlock the tools in Claude. Under Organization Settings › Connectors › Microsoft 365, the owner enables the write tools.
Permissions added by write access:
Mail.SendandMail.ReadWriteCalendars.ReadWriteFiles.ReadWrite.AllMailboxSettings.ReadWriteChatMessage.Send,ChannelMessage.Send, andChat.Create(Teams)
For Teams, each write tool is configured individually: Ask or Blocked. You can therefore open email sending without opening channel publishing. On an Enterprise plan, custom roles allow you to limit write tools to specific users.
To verify, ask a user to run the test: "Draft an email to myself, but don't send it."
Restricting and Removing Access
- Limit access to a group: enable Assignment required on both applications in Entra, with the same user group. Doing it on only one leaves the restriction incomplete.
- Remove a specific permission: in Entra, Permissions › Admin Consent › Revoke. Any tool that depends on that permission will then display an error.
- Users act on their own behalf: Claude only accesses what each person can already see in Microsoft 365, and the connector respects your data loss prevention policies.
Need a Hand?
If you'd like us to configure the connector with you, or validate your tenant before opening email sending to your team, reach out. We'll work through it together.
Sources
- Anthropic, Configuring the Microsoft 365 Connector, accessed September 14, 2026
- Anthropic, Microsoft 365 connector security guide, accessed September 14, 2026