Restrictions and limitations
The e-mail must be sent from a valid Microsoft 365 mailbox, but any of the recipients (To, Cc, Bcc) can be outside of the organization.
If this component is used in Delegated access mode, it requires Token Vault to be installed and configured.