Add an App for Exchange Online Using the Express Configuration Option

Use the express configuration option to create an Exchange Online app. After you create the Azure app that is needed for the Exchange Online app, the Commvault software automatically creates an Exchange Online service account for the Azure app, syncs the app with Azure, and authorizes the Azure app. The automatically created service account has ApplicationImpersonation and View-Only Recipients permissions.


  • In Modern authentication, service account is used only for mailbox discovery and license computation. The Application impersonation permission can be removed manually for such automatically created service accounts.
  • In Modern authentication, only one service account is automatically created.
  • In Basic authentication, by default, 10 service accounts are created for Exchange mailbox clients created with less than 10,000 mailboxes. One new service account is created for every 1,000 mailboxes added where 25 is the maximum number of service accounts.

With the express configuration option, you use the Office 365 global administrator account.

You can use the custom configuration option instead, for either of the following reasons:

  • You do not want to use the global administrator account.
  • You have multi-factor authentication enabled for global administrator account which is not supported in the express configuration.


  1. From the navigation pane, go to Protect > Applications > Office 365.

    The Office 365 apps page appears.

  2. Click Add Office 365 app.

    The Add Office 365 app dialog box appears.

  3. Click Exchange Online.

    The Exchange Online page appears.

  4. In the Name box, type a name for the app.
  5. From the Server plan list, select the server plan to use for the app.
  6. In the Infrastructure settings section, do the following:
    1. From the Index server list, select the index server to use for the app.
    2. From the Access node list, select the access nodes to use for the app.
    3. If you select more than one access node, then complete the following steps:
      1. In the Shared job results path box, enter the UNC path to the network location that you want to stage backup jobs data in.

        Enter a path that is always accessible to the access nodes.

      • For Account to access shared path option, click Add, and then enter the credentials of an account that has Windows administrative privileges on all the access nodes.
    4. Select Express configuration (Recommended).
    5. Enter the Office 365 global administrator account user name and password.
    6. Click Create Azure app.

      A Microsoft window displays all the permissions that are required to access the Azure app.

      If the pop-up blocker blocks the Microsoft window, allow access to the Microsoft window.

    7. At the bottom of the Microsoft window, click Accept.
  7. Click Save.

Last modified: 3/24/2021 3:51:09 PM