Install Bookie for your organisation
A Microsoft 365 administrator approves Bookie once, and everyone in your organisation can then sign in with their work account. It takes about a minute.
What Bookie asks for
Every permission is delegated: Bookie acts as the person signed in, with their access and nothing more. It has no application permissions and cannot read anything on its own.
| Permission | Why Bookie needs it |
|---|---|
| openid, profile, email, offline_accessMicrosoft Graph | Sign you in with your work account and keep you signed in. |
| User.ReadMicrosoft Graph | Read your name, email and organisation so the portal knows who you are. |
| Financials.ReadWrite.All (user_impersonation)Dynamics 365 Business Central | Open Business Central as you, with your own licence and permission sets. Only used if you switch Business Central on. |
| Sites.Manage.AllMicrosoft Graph | Keep Bookie’s sealed connection settings in a hidden list on your own SharePoint, instead of on our servers. |
What happens next
- Microsoft asks you to review and accept the permissions for your organisation.
- You come back to Bookie and see a confirmation.
- Anyone in your organisation can sign in at getbook.ie/portal and connect Xero, or switch on Business Central.
Limiting who can use it
Bookie appears in Microsoft Entra under Enterprise applications. To limit it to certain people, set Assignment required to Yes and assign the users or groups who should have access. Conditional access policies apply to Bookie like any other app.
Removing Bookie
Delete Bookie from Enterprise applications and remove the hidden BookieConnections list from your root SharePoint site. Bookie holds no copy of your accounts, so nothing else is left behind. See security for the full data-handling story.