1. Application Registration in Microsoft Entra
- Sign in to the Microsoft Entra Admin Center.
- Navigate to:
Identity > Applications > App registrations. - Click + New registration.
Configure Application Details:
- Name: Enter a display name for your application.
- Supported account types:
Select Accounts in this organizational directory only (\<Tenant Name/Domain> – Single tenant). - Redirect URI: Leave this field empty.
- Click Register to create the application.
2. Generate Client Credentials
After registration, you’ll be redirected to the application’s Overview page.
- Go to Certificates & secrets > Client secrets.
- Click + New client secret.
- Provide a description and set the expiration (maximum 24 months).
- Click Add.
⚠️ Important: Copy and securely save the generated client secret value. It will not be visible again.
3. Assign API Permissions
Add Delegated Permissions:
- Navigate to API permissions > + Add a permission > Microsoft Graph > Delegated permissions.
-
Add the following:
- User:
User.Read
,User.Read.All
,User.ReadWrite.All
- Mail:
Mail.Read
,Mail.Read.Shared
,Mail.ReadBasic
,Mail.ReadBasic.All
,Mail.ReadWrite
- User:
Add Application Permissions:
- Again, click + Add a permission > Microsoft Graph > Application permissions.
-
Add the same permissions as above:
- User:
User.Read
,User.Read.All
,User.ReadWrite.All
- Mail:
Mail.Read
,Mail.Read.Shared
,Mail.ReadBasic
,Mail.ReadBasic.All
,Mail.ReadWrite
- User:
✅ Ensure all permissions require admin consent.
If not already granted, click Grant admin consent to authorize the permissions.
4. Configure O365 Message Downloader Connector
-
Navigate to the connector panel > Ingestion.
-
Select O365 Message Downloader and click Configure.
-
Enter the following details:
- Client Domain (e.g.,
quickheal.com
) - Client ID
- Client Secret
- Trusted Domain (comma-separated list of trusted domains)
- Client Domain (e.g.,
-
Click Validate and Save to complete the configuration.