Email | Configure Microsoft Graph Mailer for WordPress

Configure API Permissions

Steps in this Topic

Video Walkthrough

Please follow along with the video walkthrough below, demonstrating how you should configure API Permissions, when planning to send WordPress emails from any Microsoft 365 (Shared) Mailbox using Microsoft Graph.

Assign Microsoft Graph API Permissions

  • The application still requires additional API permissions. Therefore return to the Microsoft Entra portal.
    • If you previously closed the browser tab for your app registration, click the View in Entra portal next to the Application Client ID on the plugin’s Mail configuration page to reopen it and continue.
  • Open the API permissions page in the Microsoft Entra App Registration.
  • On this page, you will see that some permissions are already present:
    • User.Read for basic sign-in permissions.
    • Default OpenID permissions.
  • Click Add a permission to add the required permissions.
    • Choose Microsoft Graph.
    • Select Delegated permissions.
  • Under OpenID permissions:
    • Select all available options including offline_access.
  • To enable email sending, additional permissions are required:
    • Scroll to the Mail section.
    • Select Mail.Send to allow the application to send email as the signed-in user.
  • Optional permissions depending on your use case and require the premium WPO365 | MAIL plugin:
    • If you want to send emails from a Shared Mailbox, also select:
      • Mail.Send.Shared
    • If you need to send attachments larger than 3 MB, select:
      • Mail.ReadWrite
    • If you are sending emails from a shared mailbox with large attachments, additionally select:
      • Mail.ReadWrite.Shared
  • These are the permissions required for the supported mail‑sending scenarios.

Grant admin consent

  • After adding the permissions, click Grant admin consent and confirm.
Screenshot: Configure API Permissions, when planning to send WordPress emails from any Microsoft 365 (Shared) Mailbox using Microsoft Graph

If the Grand admin consent for … is greyed out then you do not have sufficient permissions to continue. Since this is mandatory you must contact your Global Administrator and ask for help.


The WordPress website is now fully registered and authorized in your Microsoft Entra ID tenant and you can now return to the plugin’s Mail configuration page in WordPress.