---
schema_version: "1"
id: 25779e5cc755a1d9213d560bd1db1277bf7bc9c241056e422a05b5da8a35af70
title: Connect Einstein Activity Capture to Microsoft Office 365 using RBAC Authentication
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/sales/264-0-0/eac_setup_microsoft365_rbac_level_connection.md
canonical_url: https://help.salesforce.com/s/articleView?id=sales.eac_setup_microsoft365_rbac_level_connection.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 4b5c2b21bb44cddd5ad2b9cb0a88784612bcf3cd2f37b35ed3d3848c718a4a13
description: The Role-Based Access Control (RBAC) authentication method is available only for Microsoft Office 365. The Salesforce admin works with their Azure admin to give Salesforce access to data in Microsoft Office 365. The connection applies to all users in Salesforce. Users get access to resources not individually, but through predefined roles defined within an application.
products:
  - Sales Cloud
  - Cross Cloud
  - Service Cloud Voice
release: "264"
---
# Connect Einstein Activity Capture to Microsoft Office 365 using RBAC Authentication

The Role-Based Access Control (RBAC) authentication method is available only for Microsoft Office 365. The Salesforce admin works with their Azure admin to give Salesforce access to data in Microsoft Office 365. The connection applies to all users in Salesforce. Users get access to resources not individually, but through predefined roles defined within an application.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Einstein Activity Capture Standard in Sales in <strong>Starter</strong>, <strong>Pro Suite</strong>, <strong>Professional</strong>, and <strong>Enterprise</strong> Editions</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with <strong>Unlimited </strong>Edition, <strong>Einstein 1 Sales Edition</strong>, and <strong>Agentforce 1 Edition</strong></td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Einstein for Sales, which is included in <strong>Einstein 1 Sales Edition</strong> and available for an extra cost in <strong>Enterprise</strong> and <strong>Unlimited</strong> Editions</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Sales Engagement, which is included with Sales in <strong>Performance</strong> and <strong>Unlimited</strong> Editions, and available for an extra cost in <strong>Professional</strong> and <strong>Enterprise</strong> Editions</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Revenue Intelligence, which is available for an extra cost in <strong>Enterprise</strong> and <strong>Unlimited</strong> Editions</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d152022e134">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d152022e134 ">To connect Salesforce to Microsoft 365:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d152022e134 ">Customize Application or Modify All Data</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d152022e134 ">To view the Einstein Activity Capture setup pages:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d152022e134 ">
              <p>View Setup and Configurations </p>
              <p>and</p>
              <p style="margin-bottom:0;">Customize Application or Modify All
                Data</p>
            </td>

          </tr>
        </tbody>
      </table>

Before you begin, confirm that your Azure admin has granted org-wide [Microsoft Graph API access and permissions](https://help.salesforce.com/s/articleView?id=sales.activity_capture_graph_api.htm&release=264.0.0&type=5). See [App ID for Microsoft Graph Authentication](https://help.salesforce.com/s/articleView?id=sales.activity_capture_graph_api.htm&release=264.0.0&type=5). The admin setting up the connection from Microsoft is required to be assigned the DirectoryRole of a Global Admin, Cloud Application Admin, or Application Admin.

1. From Setup, in the Quick Find box, enter Einstein Activity Capture, and then select **Settings**.
    
    If it’s your first time setting up Einstein Activity Capture, the setup flow guides you through the steps. If you already set up Einstein Activity Capture and want to change the authentication method, reset Einstein Activity Capture.
2. Select **Microsoft 365** as the email and calendar application.
3. Select **Role-Based Access Control (RBAC) OAuth 2.0** as the authentication method.
4. Consent to confirm that your Azure admin has set up the necessary permissions for users.
5. Review the server URL that Salesforce redirects you to when you log in to your Microsoft Office 365 account as an admin.
6. Click **Log In** and enter your company’s Microsoft Office 365 account credentials. Then, accept Salesforce's access to Microsoft Office 365.
    
    When you’re done, you return to the Einstein Activity Capture setup flow and Salesforce auto-populates the tenant ID field.
7. Optionally, test the connection between Salesforce and Microsoft Office 365.
8. Follow the remaining steps in Einstein Activity Capture setup, which includes [creating a configuration and adding users to it](https://help.salesforce.com/s/articleView?id=sales.aac_setup_create_configuration.htm&release=264.0.0&type=5 "Configurations determine which data gets captured and how it flows between Salesforce and your connected account. You create one configuration during the initial setup and you can add more to customize data capture and sync behavior for specific users or profiles. By default, Einstein Activity Capture syncs events and contacts bi-directionally, though you can edit these settings at any time.").
    
    After setup is complete, Einstein Activity Capture automatically syncs data for the configured users.