Microsoft 365 Copilot setup.Entra ID and Microsoft Graph.

1. Sign in to the Microsoft Entra admin center and switch to the directory that owns your Microsoft 365 environment.
2. Open Entra ID → App registrations → New registration.
3. Name the app Palshell Desktop, or follow your organization’s naming standard.
4. Under Supported account types, choose the single-tenant option for your organization.
5. Leave Redirect URI unselected, then select Register.

Use Entra’s copy controls for both real values. Do not copy Object ID—it identifies a different directory object.

1. In the app registration, open Authentication.
2. Under Advanced settings, set Allow public client flows to Yes.
3. Select Save.

1. Open API permissions → Add a permission → Microsoft Graph.
2. Choose Delegated permissions, never Application permissions.
3. Search for and add every permission below.

• Delegated permissionSites.Read.All

  Copy
• Delegated permissionMail.Read

  Copy
• Delegated permissionPeople.Read.All

  Copy
• Delegated permissionOnlineMeetingTranscript.Read.All

  Copy
• Delegated permissionChat.Read

  Copy
• Delegated permissionChannelMessage.Read.All

  Copy
• Delegated permissionExternalItem.Read.All

  Copy

A new app registration may also show the default User.Read permission. It is not one of the seven Copilot Chat permissions Palshell requests.

1. Review the permission list with your identity or security owner.
2. Select Grant admin consent for your tenant and confirm only after that review.
3. Refresh the page and verify each required permission shows a granted status for the tenant.

Tenant-wide consent is a sensitive decision. For a limited rollout, your administrator can also require user assignment on the enterprise application and assign only approved users or groups.

1. Open Settings → AI Providers and select Microsoft 365 Copilot.
2. Paste the Entra Application (client) ID into the field with the same name.
3. Paste the Entra Directory (tenant) ID into Palshell’s Tenant field.
4. Confirm the read-only Base URL below. Select Save, or continue to Sign in—Palshell saves the configuration before starting authentication.

1. Select Sign in in the Copilot provider card.
2. Copy the one-time code Palshell displays and select Open Microsoft sign-in.
3. At microsoft.com/devicelogin, enter that code and authenticate with the licensed work or school account.
4. Return to Palshell. It continues automatically and shows Microsoft account connected when complete.
5. Select Test connection. This contacts Microsoft Graph and creates an empty Copilot conversation to verify access; it does not send a Palshell transcript.