Registering Exchange Online with Azure

Updated

You must register the Azure app with Microsoft Azure Active Directory (AD).

Important: You can perform the registration manually, as described in this topic, or you can use the custom configuration toolkit, which is available in the custom configuration option and which automates the registration process.

To improve performance and to minimize throttling, register multiple Azure apps. For an Exchange Online app that has 5,000 mailboxes, register 5 Azure apps. Every time an additional 1,000 mailboxes are added, register 1 additional Azure app.

Disclaimer: This procedure is performed using the Microsoft Azure Active Directory web application. The Azure AD application is subject to change without notice. Consult Microsoft documentation, such as Azure Active Directory Documentation.

Log On to the Azure Portal as the Global Administrator

  1. Log on to the Azure portal (https://portal.azure.com/) using your global administrator account.

  2. Go to Azure Active Directory.

Register Exchange Online in the Azure Portal

  1. In the navigation pane, click App registrations.

    The App registrations page appears.

  2. Click New registration.

    The Register an application screen appears.

  3. In the Name box, type a name for the app.

  4. Under Supported account types, select Accounts in this organizational directory only (tenant_prefix - Single tenant).

  5. To verify the status of the app and to authorize the app from the Command Center, under Redirect URI, enter the Command Center URL.

    For example, enter https://host_name.domainname.com/adminconsole.

  6. Click Register.

  7. Copy and paste the following values in a document that you can access later:

    • Application ID

    • Directory ID

      You will enter these values in the Commvault software when you complete the Office 365 guided setup.

Request and Grant Permissions for Azure APIs for Azure Apps

  1. In the navigation pane, click API permissions.

  2. Click Add a permission.

  3. Click Microsoft Graph and complete the following steps:

    1. Click Application permissions.

    2. Select the following permissions:

      • Directory: Directory.Read.All

      • Group: Group.ReadWrite.All

      • Application: Application.ReadWrite.All

    3. Click Add permissions.

  4. On the app API permissions page, click Add a permission.

  5. Click APIs my organization uses and complete the following steps:

    1. On the search bar, type Office 365 Exchange Online.

    2. Select Office 365 Exchange Online, and then click Application permissions.

    3. Select full_access_as_app.

    4. Click Add permissions.

  6. On the app API permissions page, click Grant admin consent for tenant_name.

Create a Client Secret

  1. In the navigation pane, click Certificates & secrets.

    The Certificates & secrets page appears.

  2. Click New client secret.

    The Add a client secret dialog box appears.

  3. Enter a description, and then select Never expire.

  4. Click Add.

  5. Copy and paste the client secret value in a document that you can access later.

    You will enter this value in the Command Center when you complete the Office 365 guided setup.