Individuals can connect their Google or Outlook calendar to enable the Daily Break feature, which makes personalized recommendations that fit an employee’s schedule and availability. Calendar integration is optional; employees who do not connect a calendar can still access and book Breaks manually.
How Permissions Work
To connect their calendar, employees follow an OAuth 2.0 flow to grant Bright Breaks a limited set of permissions. Bright Breaks only stores the refresh token and the email address associated with the connected calendar. No other calendar information is stored. Individuals can revoke access at any time through their account settings or directly through their Google or Outlook account.
Outlook Calendar
For Outlook calendar integration, admin action is required before individual employees can connect their calendars. An Outlook admin must follow the steps below in their Bright Breaks account.
- Opt in to calendar integration via the Fits Schedule toggle on the Bright Breaks booking page.
- Consent on behalf of the organization, which enables employees to complete their own OAuth 2.0 flow.
Note that admin consent does not connect calendars on behalf of employees—each employee must individually authorize the integration.
Bright Breaks requires two permissions: Calendars.ReadBasic, which allows the platform to read event start and end times (but not content such as event titles, body, or attachments), and User.ReadBasic.All, which is used solely to retrieve the email address associated with the calendar.
Google Calendar
For Google Calendar integration, no admin action is required. Permissions are granted by each employee individually when they connect their calendar. Bright Breaks requests the googleapis.auth.calendar.freebusy permission, which provides only free/busy time blocks. Bright Breaks cannot read event titles, descriptions, or any other event details.