Definition

A third-party application is any app that connects to your University Microsoft 365 account and is not part of the standard applications and services provided through the University’s Microsoft agreement. This includes add-ins, plug-ins, connectors, apps from app stores, and custom applications registered in Microsoft Entra ID.

General approval criteria

Requests are evaluated based on the following:

• The application supports University academic or administrative business

• The requested permissions do not expose University data to unauthorized access or unacceptable risk

• The use of the application does not introduce significant privacy risks, including potential external access to University data

• The University has an appropriate contract or agreement with the vendor, when applicable

Process

If you would like ITS to review a third-party app, please submit an ITS Service Desk Request and include:

• Add-in or Application name and Application (Client) ID

• Requested permissions and a clear business justification

• Expected users and the sensitivity of any data involved

• Links or documentation describing the application's functionality

Important:

Submitting a Microsoft “Request access” prompt or form does not initiate the review process. All requests must be submitted through the ITS Service Desk to ensure proper security and compliance review.

What will happen next?

ITS will review your request to evaluate security, compliance, and potential impact. We may follow up with additional questions, recommend alternative solutions, or proceed with approval and next steps if appropriate.

While your request is under review, consider using ITS-supported applications that may provide similar functionality.