WinsproutWinsprout for IT admins
Everything your organisation needs to approve Winsprout. Last updated 18 October 2026.
Winsprout is a personal wins journal for Microsoft Teams, made by RuBuild Services. Employees log their own achievements, create a Word report for appraisals, and can share talent posts (a title, a few words, a photo or a link) in a Teams chat or channel they choose. RuBuild Services has no server that receives data: the app runs in Teams and talks only to Microsoft.
What it asks for
Only Microsoft Graph delegated permissions. Winsprout acts as the signed-in employee, only while they use it, and never in the background.
| Permission | Why | When asked |
|---|---|---|
| User.Read | Show which account is signed in | OneDrive backup |
| Files.ReadWrite.AppFolder | Save the employee's own data and reports in OneDrive › Apps › Winsprout only. No access to other files. | OneDrive backup |
| Chat.ReadBasic | List chat names so the employee can pick where to post. Doesn't read messages. | First talent post |
| Team.ReadBasic.All | List the teams the employee belongs to | First talent post |
| Channel.ReadBasic.All | List channel names in those teams | First talent post |
| ChatMessage.Send | Post the talent message the employee wrote, after they confirm | First talent post |
| ChannelMessage.Send | Post to a channel, after they confirm | First talent post |
Microsoft lists all of these as not requiring admin consent by default, so in many organisations employees can approve them themselves. If your organisation has turned off or limited user consent, an admin approves once for everyone.
Who can approve
- App consent (the permissions above): a Global Administrator, Privileged Role Administrator, Cloud Application Administrator or Application Administrator.
- Allowing the app in Teams (if your organisation blocks store apps): a Teams Administrator or Global Administrator.
How to approve
1. Allow Winsprout in Teams (only if store apps are blocked)
Teams admin center › Teams apps › Manage apps › search Winsprout › Allow. If employees already requested it, it appears under the Apps requests filter, where you can choose Approve and unblock.
2. Grant consent for your organisation
Microsoft Entra admin center › Entra ID › Enterprise apps › All applications › Winsprout › Permissions › Grant admin consent. Winsprout appears there after the first employee in your organisation has signed in to it.
Or use the one-click link. The Copy request for IT button in Winsprout fills in your organisation's ID for you. Its format is:
https://login.microsoftonline.com/{your-tenant-id}/adminconsent?client_id={Winsprout client ID}&redirect_uri=https://rubuild.com/winsprout/admin-consent.html
Afterwards, employees can share talent posts without any further prompts. You can remove consent at any time in the same Permissions page.
Data and privacy
No data is sent to RuBuild Services. Wins are kept in the browser on the device and, if the employee connects it, in their own OneDrive app folder. Talent posts are ordinary Teams messages from the employee's account, covered by your Teams retention and compliance policies. Read the privacy policy.
Contact
support@rubuild.com