Microsoft Graph

Work IQ is the agent version of Microsoft Office applications (including Outlook, Teams, SharePoint, Word, and others), giving agents access to collaborative content such as email inboxes and Teams chat records.

The OAuth pattern authenticates users by introducing an identity provider, and after the tool authenticates, it issues an access token for the agent to use.

Microsoft Graph API is Microsoft's unified RESTful API interface, covering the full suite of Microsoft 365 services including mail, calendar, and files.

WorkIQ is an intelligence layer launched by Microsoft that provides AI Agents with organizational work context, integrating meeting notes, emails, Teams messages, and PowerPoint documents from Microsoft 365 into a context layer that models can directly consume.

Emails, meetings, documents, and chat records are office data assets uniformly exposed by Microsoft Graph, with the OAuth 2.0 authorization framework and fine-grained permission scopes controlling what third-party or internal apps can read.

In calendar systems, attendee time status is typically divided into four standard types—Free, Tentative, Busy, and Out of Office—which can be retrieved in bulk via Exchange/Outlook APIs (such as Microsoft Graph's scheduleInformation).

Reviewing and tightening access control on MCP servers that hold tenant-level Graph credentials is currently the security action with the highest return on investment.

In the Microsoft Graph permission model, delegated permissions require a signed-in user context, while application permissions are held by the app's own service principal, require no user login or MFA, and often apply to the entire tenant.

Microsoft Graph's Mail.Read application permission can read all mailboxes in a tenant, and Sites.ReadWrite.All can cover all SharePoint sites.

Connectors are the bridge through which enterprise-grade AI assistants access organisational data, and their design principle is permission inheritance: the AI only surfaces content that the current user was already entitled to view, rather than bypassing permissions to read all data.

Copilot Connectors (formerly Microsoft Graph Connectors) index content from non-Microsoft systems into Microsoft Graph; the content is copied and semantically indexed, suitable for broad searchable knowledge, but freshness depends on the time of the last crawl.

If service accounts or app registrations with Graph API access lack MFA protection, attackers can programmatically read or modify tenant data at scale after credential leakage.

Microsoft Graph API is the unified interface through which the Microsoft 365 platform exposes data and operational capabilities, covering resources such as user accounts, email, calendars, Teams messages, and security logs.

WorkIQ is not a replacement for Microsoft Graph, but rather an intelligence layer built on top of the platform.

Microsoft Graph provides more than 200 endpoints, responsible for specific operations such as sending emails, creating calendar invites, and retrieving messages.

Copilot relies on the Microsoft 365 ecosystem and can access work content such as emails, documents, calendars, and meeting notes.

Copilot reads users' emails, documents, meeting notes, calendar events, and other data within the 365 ecosystem through Microsoft Graph (Microsoft's unified data access layer).