ScheduleBot wants to access your Microsoft account
SK
Sarah Kim
sarah.kim@company.com
📅
ScheduleBot - AI Calendar Assistant
by SmartSchedule Technologies
Verified publisher
This app would like to:
Calendar & Events
Have full access to all calendars
Read, write, and delete all calendar events including private and confidential meetings. Manage calendar sharing and delegation.
Send calendar invitations as you
Create and send meeting invitations on your behalf to internal and external recipients
Mail & Messages
Read and write access to your mail
Read all email messages, send emails on your behalf, and manage mail folders
Contacts & People
Have full access to your contacts
Read, write, and delete all contacts in your directory
Access your organization's directory
Read information about users in your organization including email addresses and profiles
Files & Documents
Have full access to all your files
Read, write, and delete all files you have access to in OneDrive and SharePoint
Teams & Communication
Send messages and notifications in Teams
Post messages to channels and send chat messages on your behalf
Additional Permissions
Maintain access to data you have given it access to
Access your data anytime, even when you're not using the app
Sign you in and read your profile
View your basic profile information and keep you signed in
About consent: By accepting, you authorize this application to perform these actions on your behalf.
You can review and revoke access at any time in your account settings.
🧪 DLP Test - Agent Least Privilege
Expected: SHOULD FIRE
Full calendar access (read/write/delete)
Send calendar invites as you
Read and write ALL email
Full access to ALL files (OneDrive/SharePoint)
All contacts + org directory
Teams messaging access
Offline/persistent access
Purpose Claimed:
"AI calendar assistant for scheduling meetings"
Reality:
Scheduling should only need calendar read + limited write. This requests mail, files, Teams, contacts, org directory access.