What does IT need to do to set this up?

For Microsoft 365, administrators typically authorise security permissions and approve tenant-wide consent (via an admin consent link). For Gmail, users grant the required permissions for the Gmail add-on, and depending on organisational security settings, an administrator may also need to approve permissions.