Mail.Send
Allows smtpify365 to submit mail as the signed-in user through Microsoft Graph. This is delegated access: the service acts for the connected user, not with tenant-wide application mail permission.
User.Read
Reads the signed-in profile so smtpify365 can identify the mailbox address used for the SMTP sender restriction and dashboard.
openid, profile, and email
Standard OpenID Connect identity scopes used during sign-in and account identification.
offline_access
Allows Microsoft to issue a refresh token. The SMTP connection can obtain a new short-lived access token when a device sends later without asking the user to sign in again.
Access can be withdrawn
Revoke an individual SMTP connection in the smtpify365 dashboard. Microsoft account administrators can also manage consent and sessions using Microsoft controls.