Registering an Office 365 app and configuring permissions

Use the Azure portal to create a Microsoft Office 365 app, register it as an Azure AD v2.0 endpoint, and configure permissions.

The app registration procedure generates the following unique properties:

Application (client) ID
Directory (tenant) ID
A client secret password key

After you create and register the Microsoft Office 365 app and configure its permissions, you must configure the app to authenticate with Azure AD using these values. This is described in Configuring the Office 365 app authentication.

For detailed information about registering an application with the Microsoft identity platform, search for “Register your app with the Azure AD v2.0 endpoint” on the Microsoft Corporation web site.

Prerequisites

A Microsoft account for the Email Security - Server appliance administrator.

To register an Office 365 app at the Azure portal:

Sign in to the Azure portal (portal.azure.com) using a Microsoft account for the Email Security - Server appliance administrator.
Find App registrations and click + New registration.
Enter the name for the Office 365 app.
Under Supported account types, select Accounts in this organizational directory only.
Click Register. A message confirms that the app has been created.
In the left navigation bar, Overview is selected by default. The Overview main window displays information about the new app.
Copy the values displayed in the following rows and save them to a text file:
- Application (client) ID
- Directory (tenant) ID
Under the Manage section of the left navigation bar, select Certificates & secrets.
Under Client secrets, click + New client secret.
Enter an optional description for the password key.
Select the expiration date for the key.
Click Add.
Copy the key and add it to the text file.
Important
The secret password key is used to authorize app communication in the Email Security - Server Web UI. After the dialog box closes, you cannot return to retrieve the password.
Under the Manage section of the left navigation bar, select API permissions. The page shows the Exchange and Microsoft Graph API permissions configured for the Office 365 app.
Click + Add a Permission.
Under the Microsoft Graph section of the permissions list, enable the following permissions:
- Group.Read.All
- GroupMember.Read.All
- User.Read.All