Personal Operations Center Admin Guide

Grant Microsoft 365 consent, upload the Teams packages, and understand what Outermind stores for the Personal Operations Center.

Overview

The Personal Operations Center (POC) is a portal page that replaces Outlook on the web for an Outermind user, reading and acting on the user's own Microsoft 365 mail, calendar, and people directly against Microsoft Graph with the user's own delegated token. Before your users can use it, a tenant administrator grants delegated admin consent for the POC's Microsoft Graph scopes and uploads the updated Teams packages. This page covers both steps and what Outermind stores along the way.

Delegated permissions requested and why

The POC requests 8 delegated Microsoft Graph scopes, in addition to the User.Read scope already requested at sign-in:

Scope	Why
Mail.ReadWrite	Read folders and messages; flag, categorize, move, and delete; create drafts, including agent-visible reply and forward drafts
Mail.Send	Send the user's own mail and approved drafts
Calendars.ReadWrite	Calendar views, creating and editing events, and RSVPs
Calendars.Read.Shared	Finding a meeting time by checking attendee availability when proposing a meeting
Contacts.ReadWrite	The contact card, and adding and editing contacts
People.Read	Relevance-ranked people for pickers
User.ReadBasic.All	Directory search and other users' basic profile information
MailboxSettings.Read	Time zone, working hours, and master categories

Mail.Read.Shared (shared mailbox access) and Tasks.ReadWrite (Microsoft To Do) are not requested. The POC's to-dos widget reads Outermind work items, not Microsoft To Do.

These scopes are requested dynamically, not added to the sign-in application's static permissions. This means the Grant admin consent button for the Outermind sign-in application in the Entra admin center does not cover the POC scopes. Use the admin consent link described below instead.

How to grant admin consent

A platform administrator sees a Connect Microsoft 365 card wherever the POC needs Microsoft 365 access. The card offers:

• Grant for my organization, which opens the admin consent link in a new browser tab (outside Teams, Outermind opens this through the system browser, not a popup inside the Teams app).
• Copy link, so the link can be sent to another administrator.

The admin consent link has the form:

https://login.microsoftonline.com/{tenant-id}/v2.0/adminconsent
  ?client_id={Outermind sign-in application id}
  &scope={the 8 scopes above, space-separated}
  &redirect_uri={your Outermind origin}/poc/consent-complete
  &state={a random value}

After signing in and approving, Microsoft redirects back to /poc/consent-complete, which reports whether consent succeeded and tells the administrator to return to Teams or reload the Personal Operations Center.

Holding the Outermind platform-admin role does not guarantee Microsoft will let you grant tenant-wide consent; Microsoft still requires an Entra role (such as Global Administrator or Privileged Role Administrator) that can grant organization-wide consent. If you do not hold that role, use Copy link and send it to an administrator who does.

What users see before consent is granted. With the POC enabled but consent not yet granted, the page still loads and the Outermind-native widgets (to-dos, goals, projects, daily brief, triage rules, agent activity) work normally. Every Microsoft 365 widget (mail, calendar, people) shows the Connect Microsoft 365 card instead of content: administrators see the consent link, other users are told to ask their administrator. The terminal works, because agent work runs on Outermind's servers, not through the user's Graph token. An agent can still draft a reply on the user's behalf before consent, but review and sending that draft wait until the user's own Microsoft 365 account is connected.

How to upload the updated Teams packages

The Boardroom and PA Dashboard Teams apps each ship as a package you download and upload in Teams Admin Center. Once the Personal Operations Center is enabled for your tenant:

1. Download the Boardroom and PA Dashboard tab packages from the Team Messaging connection page. With the POC enabled, the downloaded packages include the POC tab content.
2. In Teams Admin Center, under Teams apps > Manage apps, open the app's details and note the version currently installed.
3. Compare it against the version inside the package you just downloaded. Only upload if the downloaded package's version is higher than the installed version. If the installed version is already higher or the same, do not upload; instead wait for the next deploy and re-download.
4. Upload the package in Teams Admin Center.

Re-check the version every time before uploading, including on later package refreshes: a package downloaded from an older deploy, or downloaded before the POC was enabled, can have a lower version than what is already installed.

Once installed in Teams, the Boardroom and PA Dashboard tab apps also appear in Outlook and the Microsoft 365 app, under Apps. Users sign in the same way there as in Teams; there is nothing extra to install.

Using the Drafts card

After Microsoft 365 is connected, the Drafts card lists drafts from the signed-in user's own mailbox. It distinguishes drafts created by Outermind agents from your other drafts.

1. Open the Personal Operations Center and locate the Drafts card.

2. Check the card's configured view. The supported views are:

   Show	Default card title	Contents
   All drafts	Drafts	Both agent drafts and your other drafts
   Agent drafts	Agent drafts	Drafts marked as created by an Outermind agent
   My drafts	My drafts	Drafts without the Outermind agent marker

The card settings control for switching views is delivered separately. If it is unavailable, use the view already configured on your page.

3. Read each row's first recipient, subject, preview, and last-modified time. Agent drafts also show the authoring agent's name, or Agent draft if the name cannot be resolved.
4. Select a draft to continue editing it in the composer. Drafts assigned to a hand-off review open through the review flow when that flow is available; they cannot be opened from the card while it is unavailable. A hand-off status chip appears when supplied by the review flow.
5. To remove a draft, select its Delete action. This moves it to Deleted Items. Select Undo in the notification within eight seconds to restore it to Drafts.

Drafts card FAQ

Why does the card not show every draft in Outlook?

The card checks the 50 most recently modified drafts, applies your selected filter, and displays up to 25 matching drafts, newest first. An older agent draft may therefore be absent even when fewer than 25 agent drafts are shown. Use Outlook to find drafts outside this recent set.

What does an empty card mean?

The Agent drafts view shows No agent drafts. when none of the recent drafts match. The All drafts and My drafts views show No drafts. An empty filtered view does not mean the entire mailbox's Drafts folder is empty.

Can I drag an agent draft to another card?

Agent drafts are not drag sources. Use the row's available actions to work with them.

What Outermind stores

Outermind stores pointers, not content, for the Personal Operations Center: references like page layouts and widget configuration, hand-off status and timestamps, and the terminal conversation history. Outermind never stores mail content, drafts, calendar data, contacts, or any Microsoft Graph access token on its servers.

Mail, calendar, and people data fetched from Microsoft Graph travel directly between the user's browser and Microsoft Graph using the user's own delegated token. That data lives only in the browser's in-memory query cache while the page is open; it is never written to local storage, session storage, or any other persistent browser storage, with narrow exceptions limited to Outermind-generated ids (such as a saved mail-folder id) and never message content.

How to turn the Personal Operations Center off

The Personal Operations Center is controlled by the poc tenant feature. Turning it off for your tenant hides the Personal Operations Center entries from navigation, and the Teams tab shows "not available for your organization" instead of the portal page.

After switching the feature on or off, allow up to five minutes before expecting the change everywhere: Outermind's API caches tenant feature access for five minutes per server instance, so some requests can still reflect the previous setting during that window.