For IT Teams
Setup That Respects Your Time
One short checklist, one consent step, clear permissions and nothing to install. You get exactly the steps your organisation needs, and a test for each one.
The IT Story
Four Things That Make IT Setup Simple
IT Setup Kit
A one-page checklist built from the systems your organisation chose. Each step shows who does it, where, the permissions and a Test button.
One-Click Admin Consent
Microsoft 365 and Google Workspace connect with a single admin consent step for your tenant.
Setup Link From Sales
Your sales manager sends you a single-use, expiring link. No shared passwords, and no access to call content.
Zero Install
Runs in a modern browser on locked-down laptops. No plug-in, local agent or desktop app is required.
Delegated Setup
How the Setup Link Works
In most companies the person buying Call Caddie is not the IT admin. The setup link hands over exactly the right work without handing over an account.
- The sales manager clicks Send Setup to My IT Team
- You receive a single-use invitation that expires after seven days and can be revoked
- You get the IT Administrator role, limited to integrations and security
- You work through the IT Setup Kit and test each connection
- The manager sees progress and is notified when you finish or get blocked
- Every action is recorded in the audit log
No extra seat. By default, an IT admin who does not make calls is not charged as a user.
Least Privilege
Every Permission, With Its Reason
We only request permissions listed here. Each one says why it is needed and what stops working without it. Permissions are checked against current Microsoft and Google documentation before every release.
Microsoft 365 (Microsoft Entra ID)
| Permission | Why it is needed | Without it |
|---|---|---|
| openid, profile, email | Sign users in with their work account | Microsoft sign-in is unavailable |
| offline_access | Keep the connection working without signing in again each hour | Users are asked to sign in repeatedly |
| User.Read | Read the signed-in user's name and email | Profiles cannot be matched to users |
| Calendars.ReadWrite | Check availability and book meetings during a call | Meetings must be booked manually |
| Mail.Send | Send follow-up emails from the rep's own mailbox | Follow-ups must be sent manually |
Optional application permissions are used only if you choose them, with Exchange Online access restricted to the mailboxes you name.
Google Workspace
| Scope | Why it is needed | Without it |
|---|---|---|
| openid, email, profile | Sign users in with their Google account | Google sign-in is unavailable |
| calendar.events | Create meetings and invites during a call | Meetings must be booked manually |
| calendar.freebusy | Check availability without reading event details | Free times are not shown on the call screen |
| gmail.send | Send follow-up emails from the rep's own mailbox | Follow-ups must be sent manually |
Network and Email
Firewall and Mail Rules, Published
Your IT Setup Kit lists the exact domains, ports and records for your organisation. Here is what to expect.
| Traffic | Protocol and port | Details |
|---|---|---|
| Application and API | HTTPS, 443 | Your Call Caddie address, listed in the IT Setup Kit |
| Real-time updates | WebSocket over TLS, 443 | WebSockets must be allowed through proxies |
| Sign-in | HTTPS, 443 | Microsoft or Google identity endpoints, if you use them |
| Files and status | HTTPS, 443 | File and status page addresses, listed in the IT Setup Kit |
| Calls into your systems | HTTPS, 443 | Outbound IP ranges are published for CRM, PBX or on-premise allow-lists |
TLS-Inspecting Proxies
Call Caddie does not use certificate pinning, so inspecting proxies work as long as WebSockets are allowed.
Email Authentication
Rep email from their own mailbox needs no DNS change. System email from your domain needs SPF, DKIM and DMARC records, shown in the IT Setup Kit.
Day Two
One Place to See Every Connection
The IT Overview shows each connection's state, owner, permissions and expiry date, with plain-English fixes when something fails.
- Test All runs sign-in, sample read, safe write and webhook checks
- A daily self-test emails the owner before a token or consent expires
- Download an integration map of systems, data flows and owners
- Optional Chrome and Edge extension, force-installed by Intune, Group Policy or Google Admin
- Extension host access limited to the CRM domains you configure
- No secrets in the IT Setup Kit, and none shown in the browser
Design Targets
How We Measure "Simple"
These are the targets we design and test against with external testers. They are goals, not guarantees for every environment.
Under 10 Minutes
From sign-up to a first guided call in Guide Only mode, with no IT involvement.
Under 15 Minutes
For an IT admin to connect Microsoft 365 sign-in, calendar and mail using the IT Setup Kit.
Under 30 Minutes
To connect a native CRM, map it from the template and test it.
Send Your IT Team One Link
Start a trial, choose your systems and send the IT Setup Kit to your IT team. They get exactly the steps they need and nothing more.