Applicable plans: ❎ The Free plan, ❎ The Complete plan

Waldo is designed with your security in mind — and that includes how it connects to your Microsoft environment.
Instead of using Application Consent, we’ve chosen Delegated Consent.
But what does that mean exactly? Let’s break it down 👇

🔐 Application Consent: all or nothing

Application Consent means giving the app full rights to act on your environment — no matter who’s logged in.
It’s simple, but risky: once approved, the app can do anything.
It’s all or nothing.

🧭 Delegated Consent: user-based access

With Delegated Consent, Waldo only acts on behalf of the logged-in user.
👉 The app can’t do anything on its own.
👉 It only has access to what the user is allowed to do.

That’s safer, more transparent, and more aligned with your access policies.

🎯 Narrow it down further with Consent Scope

Want even more control?
You can limit which specific features Waldo is allowed to use — that’s called setting the Consent Scope.
💡 Fewer permissions granted = more control.

In a nutshell