Approving Pipeline Agent for your sellers

What Pipeline Agent is, and what it needs

Pipeline Agent is an AI sales assistant from Enlyft. It researches target accounts and drafts outreach, and the seller decides what gets sent. It connects to your email and messaging tools through standard OAuth so it can send approved emails and notify sellers.

• A person approves every email before it’s sent. The agent only drafts.
• Connections are per user and delegated. Each seller connects only their own mailbox, and Enlyft can’t reach anyone else’s.
• Your admins can revoke any connection at any time from Microsoft Entra ID, the Teams admin center, the Google Admin console or Slack, without involving Enlyft.
• Your data is not used to train AI models.
• Enlyft holds SOC 2 Type 2, ISO 27001:2022 and ISO 27701:2019. See our Trust Center.

This pack covers Outlook, Gmail, Microsoft Teams and Slack. LinkedIn is excluded because it’s connected at the seller level, not through your IT tenant.

At a glance

Every connector is optional. Without a mailbox connection, sellers have to copy and paste each approved draft into their own mail client, which is slow, and they get no insight into open rates or replies.

Outlook and Teams

Why users see “Need admin approval”: your tenant restricts which third-party apps users can add. An admin approves once for the tenant, and then every seller can connect.

Two approvals, one admin. Outlook is approved in Microsoft Entra ID (step 1), and the Enlyft Teams app in the Teams admin center (step 2). If your sellers only need Outlook, step 1 is enough.

Who can approve: a Global Administrator, Cloud Application Administrator or Application Administrator for step 1, and a Teams Administrator or Global Administrator for step 2.

Permissions

Mail permissions in Microsoft Graph cover the whole mailbox. Pipeline Agent only reads replies to the emails it sent.

Step 1: Approve Outlook in Microsoft Entra ID

The app you’re approving: Enlyft, published by Enlyft (enlyft.com), publisher verified. Client ID 0ac96595-a9f2-46d2-aae0-073ca8a61e9c. It uses delegated permissions only. It acts as the signed-in seller and can’t reach anything that seller can’t.

Use any one of these:

1. One click, whole tenant. Open the admin-consent link below, sign in and accept. You land on an Enlyft page that confirms the approval.
   https://login.microsoftonline.com/organizations/adminconsent?client_id=0ac96595-a9f2-46d2-aae0-073ca8a61e9c&redirect_uri=https%3A%2F%2Fapp.enlyft.com%2Fit-approval%2Fcomplete
2. Approve the pending request. Entra admin center → Enterprise applications → Admin consent requests → the Enlyft request → Review permissions and consent.
3. From the app page. Entra admin center → Enterprise applications → the app → Permissions → Grant admin consent. The app shows up here once any user has tried to connect.

Step 2: Approve the Enlyft Teams app in the Teams admin center

The app you’re approving: Enlyft, by Enlyft, Inc.

1. Teams admin center → Teams apps → Manage apps → search for Enlyft → open it.
2. Set Status to Allowed. If third-party apps are turned off for your org, also allow them under Org-wide app settings.

After approval, each seller finishes connecting in Teams by clicking Connect on the Enlyft welcome card.

Limit it to the sales team

Outlook: set Assignment required to Yes in the app’s Properties in Entra ID, then assign the users or group. Your Conditional Access policies still apply.

Teams: Manage apps → Enlyft → Users and groups → choose Specific users or groups and add the sales team. Tenants not yet on app centric management use an app permission policy instead.

Revoke

A seller clicks Disconnect in Enlyft. To revoke Outlook for everyone, set Enabled for users to sign in to No in the app’s Properties in Entra ID, or delete the app. To revoke Teams for everyone, set the app’s Status to Blocked in Manage apps.

Gmail

Enlyft connects to Gmail through Composio, so Composio is the app name you’ll see in your Admin console.

Composio client ID: 511566560828-23utloam4ek35i5n4grb870kucdva5fu.apps.googleusercontent.com

Google verification status: Verified (Composio).

Scopes

How to approve

Only needed if you restrict third-party apps.

1. Admin console → Security → Access and data control → API controls.
2. Manage Third-Party App Access → Configure new app → search for Composio, or paste the client ID above.
3. Mark the app ‘Composio’ as Trusted, scoped to your sales organizational unit. Enlyft connects to Gmail through Composio, so that is the name you’ll see.

Revoke

A seller clicks Disconnect in Enlyft, or removes the app under Google Account → Security → Third-party apps. An admin can set the app to Blocked in API controls.

Slack notifications

Pipeline Agent posts notifications to the seller, such as a new account plan or recommended action. It doesn’t read channel history or messages.

Install model and scopes: each seller clicks Connect, which runs Slack’s standard app install (OAuth v2). Enlyft asks for one bot scope, chat:write, so it can post messages but not read them.

Revoke: a Slack admin removes the app under Manage apps.

What we store, and for how long