# Limit Cronofy's access

Cronofy's Individual Connect flow allows an end-user to connect their own Office 365 calendar via the **Cronofy for Office 365** application (Application ID `f573e3d3-ea9c-4d8d-9d8f-20107b8cedbd`). By default, once this application has been registered in your Office 365 tenant, this allows your users in the organization to authorize their calendar through your integrator's application.

However, you can restrict which users are able to complete the Individual Connect authorization flow by requiring user assignment for the application within Microsoft Entra ID, and then assigning only the specific users or groups who should be allowed to connect their calendars.

### Configuring users and groups
Before you can restrict access, the **Cronofy for Office 365** application must exist as an Enterprise Application within your tenant.

- To register and approve the application within your tenant before any user connects their calendar, ask your integrator for an admin consent link. See our guide on ['Need admin approval' errors](/calendar-admins/faqs/need-admin-approval-error/index.md) for more information, or you can contact [support@cronofy.com](mailto:support@cronofy.com) directly confirming which integrator you're connecting to and we can provide you with the admin consent link.

- Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/#home) as a Global Administrator (or another role with permission to manage enterprise applications), and navigate to **Entra ID** > **Enterprise Applications** >.

![](/calendar-users/office-365-outlook/restrict-access/enterprise-applications-list.1e42bf16c0a1fc8a3a16904b027eb8f9ed8e04917f69093ee5f485588ab254a3.png)
<ol start="3">
- Find and select the application named **Cronofy for Office 365** (Application ID `f573e3d3-ea9c-4d8d-9d8f-20107b8cedbd`).

- From the application's page, go to **Manage** > **Properties**.

![](/calendar-users/office-365-outlook/restrict-access/cronofy-app-properties.543f47db9f9cfe209f3505081c46fc96515e930b15482bf7276bceb0102e41a1.png)
<ol start="5">
- Set **Assignment required?** to **Yes**, then click **Save**. See Microsoft's documentation on the [Assignment required property](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/application-properties#assignment-required) for more information.

![](/calendar-users/office-365-outlook/restrict-access/assignment-required.3a325dab7f5986dadbb3c7ef7b6dd6963d448f771755dbe6a7a0d072cedfd163.png)
> **WARNING:** As soon as **Assignment required** is set to **Yes**, no user will be able to complete the Individual Connect authorization flow. Cronofy will not be able to retrieve an `access_token` for any account that has not been assigned.

<ol start="6">
- While still viewing the Cronofy application, go to **Manage** > **Users and groups**, then select **Add user/group**.

![](/calendar-users/office-365-outlook/restrict-access/assign-users-groups.f0b8f3edf6a1db559ac7454628f32de837d645362429056e5a18d6604c2c8088.png)
<ol start="7">
- Select the users and/or groups who should be permitted to connect via Individual Connect, then click **Assign**. See Microsoft's documentation on [assigning users and groups to an application](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/assign-user-or-group-access-portal) for more information.

### What unassigned users will see
Once assigned, only the selected users will be able to complete the Individual Connect authorization flow and grant Cronofy the required permissions.

Any other user attempting to connect will be blocked by Microsoft before reaching Cronofy and will be shown the following message:

![](/calendar-users/office-365-outlook/restrict-access/user-error.5332c4eb48669c6423bbfcbe2d94ab6bf28252b15450a4bd8fe8d9a0e42161de.png)
#### Additional reading
For further reading on this, please see Microsoft's documentation on [restricting your Microsoft Entra app to a set of users](https://learn.microsoft.com/en-us/entra/identity-platform/howto-restrict-your-app-to-a-set-of-users).

If you require any further assistance, please contact us at [support@cronofy.com](mailto:support@cronofy.com).


---
[Read in HTML](/calendar-users/office-365-outlook/restrict-access/)