How can I automate sending emails through M365 without using Graph API?
Asked by
ChillVibes_23
I've been generating weekly reports in a Node.js application and sending them manually to about 30 recipients. I want to automate this process using M365, but my IT department is reluctant to allow the use of Graph API because they find it confusing and a potential security risk. I've managed to make the application create email drafts through Outlook via command line, but I still have to manually press send for each email. Is there a way to automate sending these emails without needing IT's approval?
Answers
If you're thinking about automation, just keep in mind that using an application to authenticate can be risky in terms of permissions. The mail.send permission could allow the app to send emails on behalf of any user, which poses a security concern. Make sure you're aware of that if you go down that route!
Reply to this answer
Sticking to Outlook CLI hacks sounds rough. If SMTP is open, consider using Nodemailer or a similar library. Yeah, Graph is the gold standard, but sometimes IT blocks stuff just because it sounds too complicated.
Reply to this answer
Why not just send the email details to your IT team and ask them to send the emails manually? It might speed things up. Also, it’s amusing how long some teams stay stuck in outdated practices. Ever feel like they're just justifying their jobs? Just like draining the sea, they think closing access is better for security!
Realist_34: For sure! They'll probably end up spending ages manually sending emails and then billing you for that time. It's a lose-lose battle sometimes.
Reply to this answer
Forget about being tied to M365; you might want to look into using an SMTP service instead.
Reply to this answer
Add your answer
Answers are reviewed before publication.
SecurityWatcher_77: You can limit permissions through Exchange to make it safer. Just check out the documentation on application RBAC.
ScopedOut_88: Definitely! You can use application policies in Exchange to fine-tune the permissions for what your app can do.