Microsoft 365: approval for IT

Step 1: What Seatline asks for

Sign-in: colleagues sign in with their Microsoft 365 work account. Seatline gets their name, e-mail address and Microsoft’s ID for them (permissions openid, profile, email and User.Read).

People list, for the nightly update: the application permission User.Read.All (“Read all users’ full profiles”). Of that, Seatline keeps only name, e-mail, department, job title and whether the account is active. Guest accounts are skipped.

Seatline never writes anything to Microsoft 365, and it doesn’t read mail, calendars, files or Teams.

Step 2: Who gets in

The first person from your organisation who signs in creates the workspace and becomes its admin. Everyone else from the same organisation joins that workspace when they sign in — there is never a second workspace for your organisation.

An admin decides what newcomers get under People & access → Settings → Who can open Seatline: “Everyone in the organisation can view the map” (they start as Viewer) or “Only people you give a role”.

Step 3: Approve Seatline once

The people list always needs an admin’s approval. In Seatline, an admin opens People & access → Settings → Microsoft 365 and clicks Sync now. If Microsoft hasn’t approved it yet, the button Approve in Microsoft appears: a Global Administrator or Privileged Role Administrator clicks it and accepts.

If your organisation doesn’t let people approve apps themselves, the first person already sees “Need admin approval” when signing in. Then IT opens the approval link below and accepts — that covers sign-in and the people list together.

Approval link for IT:https://login.microsoftonline.com/organizations/adminconsent?client_id=4b2767d9-ba3b-4c2a-b793-61bdd6fd52c0&redirect_uri=https%3A%2F%2Fapp.seatline.ch%2Fpeople

Step 4: Limit Seatline to some people (optional)

In the Microsoft Entra admin center, open Enterprise applications → Seatline → Properties, set “Assignment required?” to Yes and save. Then add the people or groups who may sign in under Users and groups.

This limits who can sign in. The nightly people list still comes from the whole directory, so everyone can get a desk.

Step 5: Remove the approval

In the Microsoft Entra admin center, Enterprise applications → Seatline → Properties → Delete removes Seatline from your organisation. New sign-ins and the nightly update stop at once; someone who is already signed in stays signed in for up to 30 days.

Your data in Seatline stays until your workspace is deleted. To delete it, write to hello@seatline.ch.