Permissions requested
- 1User.Read.All — names, titles, phone numbers, departments and photos.
- 2Group.Read.All — target signatures by group membership.
- 3MailboxSettings.ReadWrite — write roaming signatures into Outlook.
- 4Organization.Read.All — verify your tenant and domains.
Steps
- 1In the admin console open Setup, then Microsoft 365, and select Connect.
- 2Sign in as a Global Administrator and review the consent screen.
- 3Grant consent for the whole organisation.
- 4Wait for the first directory sync to finish — typically two to five minutes.
- 5Assign a template to a pilot group and deploy.
Verifying
Open a pilot mailbox in Outlook on the web and check that the signature appears in the compose window. If you also enabled transport stamping, send a message to an external address and inspect the delivered mail.
Roaming signatures require Outlook 2016 or later, new Outlook, or Outlook on the web.