Configure integration permissions and multiple accounts

Understand the two permission layers

TimeSentry controls who can configure a company connection. The external provider separately controls which account, workspace, tenant, or organization can be authorized and what data TimeSentry may access. Approval in one system does not override restrictions in the other.

Read the provider's authorization screen before accepting it. Use a business account owned by the company, not a personal account, unless company policy explicitly permits otherwise.

Connect multiple mail or calendar accounts

Gmail, Google Calendar, Outlook Mail, and Outlook Calendar can have multiple connections. Connect each account separately. In Manage Integrations, select the specific connection before changing rules or reviewing its configuration.

Use meaningful display names such as a mailbox, calendar, department, or account name. Avoid identical names that make it difficult to identify the source of captured activity.

Review access periodically

Review connected accounts after staffing changes, client offboarding, mailbox changes, or a security incident. Remove obsolete connections and revoke stale provider grants. If an employee leaves, do not assume disabling the employee's TimeSentry login also revokes the external provider token.

Resolve an authorization loop

Confirm that pop-ups are allowed, the provider account is signed in, and an administrator has granted any required tenant or workspace consent. Return to the correct active company before retrying. If the provider says TimeSentry is connected but TimeSentry does not, remove the incomplete grant from the provider and reconnect once after confirming no synchronization is running.