Microsoft Exchange Online

Connection Requirements

1 - Tenant ID

Tenant ID (Directory ID, GUID) of the Microsoft 365 tenant. Used in both the OAuth2 token request and the Exchange Online Admin API URL path.

2 - Client ID

Application (client) ID of the Microsoft Entra ID app registration that will access the Exchange Online Admin API.

3 - Client Secret

1. In the Microsoft Entra admin center, open your app registration and go to Certificates & Secrets. Click New client secret, set a description and expiration, then click Add. Copy the secret value immediately — it cannot be retrieved later.

2. Open API Permissions > Add a permission > APIs my organization uses and search for Office 365 Exchange Online.

3. Select Application permissions, expand Exchange, enable Exchange.ManageAsAppV2, and click Add permissions.

4. Click Grant admin consent to approve the permission for the organization.

5. Assign the Recipient Management Exchange RBAC role group (or the broader Exchange Administrator Entra role) to the app's service principal so it can read mailbox data.

4 - Anchor Mailbox

Optional routing key sent in the X-AnchorMailbox header of every API call. Leave empty to use the tenant's system mailbox key (recommended). Override only if your tenant requires a specific routing target, for example AAD-UPN:[e-mail].

5 - Proxy

Proxy URL (optional).

6 - Timeout

The amount of time (in seconds) to wait for API responses. (default: 30)

Attention

Please perform a connection test to ensure there is a valid connection to the Microsoft Exchange Online host. Once the discovery operation is finalized, you will be able to see the details on the Assets page.