Microsoft says you need admin approval? Send this page to your IT team. It has everything they need.
Someone on your team asked for Sendasta. Here's what you're approving.
Sendasta is an Outlook add-in that checks recipients the moment someone clicks Send and stops email going to the wrong company. It doesn't read message content. Approval is one consent click and, optionally, a five-minute deployment.
Why they're asking
Outlook auto-complete suggests the wrong "John," a reply-all pulls in the other side of a deal, and a client file goes to a competitor. Message recall doesn't help: it only works inside your own Exchange organization, so once mail reaches an outside domain, it's gone. Sendasta catches it before it leaves by blocking domains you've listed and flagging emails that mix unrelated outside companies.
What it can and can't access
Reads
- The sender and recipient addresses of the email being sent, at the moment you click Send, so it can check them against your rules
- Your name and email from Microsoft sign-in, so it can find your organization’s policy
Never touches
- The subject, body, or attachments of any email
- Other emails, folders, calendar, contacts, or files
- Send, delete, or move mail on anyone’s behalf
- Any Microsoft Graph mailbox permission (none are requested)
Outlook add-in manifest
ReadWriteItemLimited to the message being composed. Outlook requires this level for any add-in that runs when a user clicks Send.
Microsoft Entra ID (sign-in)
openid, profile, emailDelegated sign-in scopes only. They identify the user and nothing else.
How to approve it
Do step 1 if users see "Need admin approval" when signing in. Do step 2 to install it for them so they don't have to.
Grant consent for your organization
One click approves Microsoft sign-in for everyone in your tenant. That covers both the Outlook add-in and the Sendasta admin console, which use the same app registration. You'll see Microsoft's own consent screen listing the scopes above before anything is granted.
Grant admin consentRequires Global Administrator, Application Administrator, or Cloud Application Administrator. You can review or revoke it later under Entra ID → Enterprise applications.
Deploy the add-in
Deploy to just the person who asked as a pilot, or to everyone. Users don't need to do anything.
- 1
Sign in to the Microsoft 365 admin center and go to Settings → Integrated apps.
- 2
Click Upload custom apps and choose Office Add-in as the app type.
- 3
Select Provide link to manifest file and paste
https://sendasta.com/sendasta-manifest.xml - 4
Under users, pick Specific users/groups to start with just the person who asked, or Entire organization.
- 5
Review the permissions above, accept, and click Finish deployment.
Requires Global Administrator or Exchange Administrator. Sendasta usually appears in Outlook within a few hours; Microsoft allows up to 24. Want more detail on each screen? See the full deployment walkthrough.
Rather let people install add-ins themselves? Individual installs are controlled by the My Custom Apps role in your Exchange user role assignment policy. Deploying centrally (step 2) is usually simpler than changing it.
Reference
Publisher
Sendasta
Manifest URL
https://sendasta.com/sendasta-manifest.xml
Add-in ID
28ebbbaf-b325-4b28-aaa4-aea80f90dadd
Entra application (client) ID
e30e9a4c-7c36-464a-9dff-f29e84be2be5
Outlook clients
Outlook on the web, new and classic Outlook for Windows, Outlook for Mac
Stored data (Business plan)
Usage events keep recipient domains only; individual email addresses are stripped before storage
Removal
Remove it from Integrated apps at any time; it drops out of users’ Outlook on the next sync
AppSource
Not listed. Deployed privately from the manifest URL above
Full details in our privacy policy. Other install methods are in the setup guide.