What to send your IT admin when your organisation blocks third-party calendar apps, and why only they can unblock it.
Your organisation blocks third-party apps by default, and you can't approve this yourself. Your IT admin has to allow it, and it takes them about two minutes.
Send them this: syncdate.app/support/workspace-admin. It's written for admins — the exact permissions SYNCDATE requests and the steps to approve, for both Microsoft Entra and Google Workspace.
A consent screen you can't get past. "Need admin approval", "Approval required", or a code starting AADSTS. Microsoft is telling you your tenant doesn't allow users to approve apps.
A connection that dies within minutes. The sign-in works, calendars appear, and then the account asks you to reconnect. An admin policy revoking the grant is one possible cause. A missing scope or unavailable Outlook mailbox can also cause a connection problem; check the account error in SYNCDATE and whether Outlook itself opens.
If a work account keeps dropping and a personal account on the same setup is fine, ask your admin to check its consent policy and mailbox.
There's a shortcut in the dashboard. When we detect the block, a card appears with the message already written for you — the details your admin needs, in a form you can send as-is. Copy message puts it on your clipboard; Email a copy to myself sends it to your own inbox if you'd rather forward it from there. Either way you're forwarding it on yourself: we don't contact your admin, and we're never told whether they approved it.
Or send them the link above directly. Either works; the email version just saves you composing it.
Worth knowing, because it's the first thing they'll ask.
SYNCDATE uses delegated permissions for the account you connect. On Microsoft sign-in it requests read and write access to that account's calendars. When you connect another Outlook account or change its access on the Accounts page, you can choose read-only access, shared-calendar access, or no calendar access. Shared read lets you use calendars others shared with you as sync sources. Shared write lets you use one as a target only if its owner also gave you edit rights. By default, a synced copy just says "Busy" unless you choose to copy details.
Your admin approving a scope does not automatically share anyone's calendar with you. The owner or Exchange admin must give your account access, and you must accept or add the calendar in Outlook. The Entra app registration can show more scopes than you selected; SYNCDATE sends your choice to Microsoft, and Microsoft may also display configured permissions on its consent screen. An earlier Microsoft grant is not revoked just by selecting narrower access later, but SYNCDATE enforces your current selection.
These are permissions for the connected account, not application-wide access to every mailbox in your company. Microsoft supports shared read consent for personal Microsoft accounts; it does not list shared write consent for them. Your company's admin approval applies to work accounts in its tenant, not to a personal Microsoft identity using the same email address.
SYNCDATE is also listed on Microsoft Marketplace and Google Workspace Marketplace, if that's a faster way for your admin to check us out than reading this page.
Admins who want to review it properly can email vlad@syncdate.app, including for the exact OAuth client ID if their policy requires it before allowlisting.
Some organisations won't approve any third-party calendar access, and that's a legitimate call on their part. Your options then:
We can't work around an admin block, and we wouldn't want to. A tool that bypasses your company's app policy is a tool your company is right to distrust.
Verified against the product on .
Still stuck? Support will read your actual setup and tell you what it sees — describe what you expected and what you got.