Workfront for Outlook requires the highest of the four levels of permissions allowed in Outlook add-ins.
For details regarding permissions in Outlook add-ins, see Privacy, permissions and security for Outlook add-ins in the Microsoft documentation.
The Workfront for Outlook add-in requires Read/write mailbox access (
ReadWriteMailbox), which is the highest permission scope.
The Workfront for Outlook integration requires the highest level permissions because it has the functionality to download email attachments from the Outlook exchange server and upload them to Workfront, when the user submits a Request from an email that has attachments. For this functionality to work, Workfront for Outlook uses the function
ReadWriteMailbox. For more information, see Privacy, permissions and security for Outlook add-ins in the Microsoft documentation.
The Workfront for Outlook add-in also requires
ReadWriteItem permission (included in
ReadWriteMailbox), which is used to read the email body and read/update email metadata:
Read email body:
Workfront for Outlook reads the email body when a user submits the request or sends the email body as an update to Adobe Workfront Object.
Read/Update email metadata:
Workfront for Outlook updates email headers when a user submits a request from an email. This is done to store information about the submitted Adobe Workfront object, so the next time the user opens the add-in for the same email the information about previous actions with that email are shown.
Workfront for Outlook accesses a user’s Mailbox only when the user performs an action within the add-on. It does not have any background functionality. Workfront for Outlook accesses the user’s mailbox in the following scenario only: