How to Authorise Thrive Hub for Outlook

Thrive Hub includes several Microsoft-powered widgets that allow users to connect their Microsoft accounts for a richer experience:

• Outlook Calendar widget: View upcoming calendar events

• Teams Calendar widget: View Teams meeting schedule

• Outlook Mail widget: View recent emails

• Teams Messages widget: View recent Teams messages

These widgets use OAuth sign-in via the Thrive Hub for Outlook app registration (provided by Thrive Learning and powered by Unified.to). When a user in your organisation first attempts to connect one of these widgets, Microsoft may display the following prompt:

"Thrive Hub for Outlook needs permission to access resources in your organisation that only an admin can grant. Please ask an admin to grant permission to this app before you can use it."

This is expected behaviour for enterprise Microsoft 365 tenants with admin consent policies enabled. This guide explains how your IT administrator can grant the necessary consent so that your users can connect seamlessly.

Prerequisites

Before following the steps below, ensure you have:

• A Microsoft 365 Global Administrator or Application Administrator account

• Access to the Microsoft Entra admin center

• The Thrive Hub for Outlook app details:

  • Application (client) ID: 5bacaeb0-d1f1-4719-95f1-21bd8e57db08

  • Publisher: Thrive Learning

Granting Admin Consent

There are two ways to grant admin consent. Choose the method that best suits your organisation.

Method 1: Grant Consent via the Microsoft Entra Admin Center (Recommended)

This method gives you full visibility and control over what permissions are being granted.

Step 1: Sign in to Microsoft Entra

1. Go to https://entra.microsoft.com

2. Sign in with your Global Administrator or Application Administrator account

Step 2: Find the Thrive Hub for Outlook application

1. In the left-hand menu, navigate to Entra ID → Enterprise App

2. Click the All applications tab

3. Search for Thrive Hub for Outlook

4. Click on the application to open it
   

Step 3: Grant admin consent

1. In the left-hand menu of the application, click API permissions

2. Review the listed permissions (see the Permissions Reference section below)

   

3. Click Grant admin consent for [Your Organisation Name]

4. Confirm the action when prompted

5. The permission status should update to show a green ✅ Granted for [Your Organisation] badge

Step 4: Verify

Ask a user to attempt to connect a Microsoft widget in Thrive Hub. They should now be able to sign in and connect without seeing the "Need admin approval" message.

Method 2: Admin Consent via the Sign-In Prompt

If a user in your organisation sees the "Need admin approval" screen, an admin can approve directly from that screen:

1. On the "Need admin approval" screen, click "Have an admin account? Sign in with that account"

   

2. Sign in with your Global Administrator or Application Administrator credentials

3. You will be shown the list of permissions the app is requesting

4. Check the box "Consent on behalf of your organisation"

5. Click Accept

   

All users in the organisation will now be able to sign in to Thrive Hub for Outlook widgets without needing individual approval.

Permissions Reference

The Thrive Hub for Outlook app requests the following Microsoft Graph permissions via OAuth. These are the minimum permissions required to power the Hub widgets:

Note:

All permissions are delegated — the app only ever acts on behalf of the signed-in user. It does not have application-level access to your tenant's data.

Security and Data Handling

• Delegated access only: The app cannot access any data unless a user has explicitly signed in and consented

• No data storage: Thrive Hub displays data in real-time — email, calendar, and message content is not stored on Thrive's servers

• Integration partner: Authentication flows are handled securely via Unified.to, Thrive‘s integration partner

• Encryption: All data is transmitted over HTTPS/TLS

• Revocation: Users can disconnect their Microsoft account at any time from within Thrive Hub. Admins can revoke consent at any time from the Microsoft Entra admin center

Troubleshooting

• Users still see "Need admin approval" after consent was granted

  • Ensure consent was granted by an account with Global Administrator or Application Administrator role — other roles may not have sufficient permission

  • Check that consent shows ✅ Granted (not just "Added") in the API permissions panel

  • Ask the user to sign out of Thrive Hub and try again — a fresh sign-in is sometimes needed to pick up the new consent

  • Check whether your tenant has User consent settings configured to block all third-party apps — if so, admin consent alone may not be sufficient and your admin consent policy may need reviewing

• The app doesn't appear in App registrations

  • Try searching under Enterprise applications instead — this is where multi-tenant apps provisioned to your tenant typically appear

  • Ensure you are searching for the exact name: Thrive Hub for Outlook

  • You can also search by Application ID: 5bacaeb0-d1f1-4719-95f1-21bd8e57db08

• How can I verify that authorisation succeeded?

  1. In Microsoft Entra, go to Enterprise applications → Thrive Hub for Outlook → Permissions

  2. You should see the permissions listed with a status of Granted

  3. Alternatively, go to Enterprise applications → Thrive Hub for Outlook → Users and groups to see which users have signed in

• How do I revoke access?

  1. In Microsoft Entra, go to Enterprise applications → Thrive Hub for Outlook

  2. Click Permissions and select Revoke admin consent

  3. Individual users can also disconnect their account from within the Thrive Hub widget settings

Need Further Help?

If you're still experiencing issues after following this guide, please contact Thrive Support with the following information:

• Your Microsoft 365 tenant domain (e.g. yourcompany.onmicrosoft.com)

• The widget(s) affected

• Any error messages shown

• Whether your tenant uses conditional access policies or custom admin consent workflows