Add an App for Exchange Online Using the Express Configuration Option

Use the express configuration option to create an Exchange Online app. After you create the Azure app that is needed for the Exchange Online app, the Commvault software automatically creates an Exchange Online service account for the Azure app, syncs the app with Azure, and authorizes the Azure app. The automatically created service account has ApplicationImpersonation and View-Only Recipients permissions.


  • In Modern authentication, service account is used only for mailbox discovery and license computation. The Application impersonation permission can be removed manually for such automatically created service accounts.
  • In Modern authentication, only one service account is automatically created.
  • In Basic authentication, by default, 10 service accounts are created for Exchange mailbox clients created with less than 10,000 mailboxes. One new service account is created for every 1,000 mailboxes added where 25 is the maximum number of service accounts.

With the express configuration option, you use the Office 365 global administrator account.

You can use the custom configuration option instead, for either of the following reasons:

  • You do not want to use the global administrator account.
  • You have MFA enabled for global administrator account which is not supported in the express configuration.


  1. From the navigation pane, go to Protect > Applications > Office 365.

    The Office 365 apps page appears.

  2. Click Add Office 365 app.

    The Add Office 365 app dialog box appears.

  3. Click Exchange Online.

    The Exchange Online page appears.

  4. In the Name box, type a name for the app.
  5. From the Server plan list, select the Exchange Server plan to use for the app.
  6. In the Infrastructure settings section, enter the following information:
    1. From the Index server list, select the index server to use for the app.
    2. From the Access node list, select the access nodes to use for the app.
    3. If you select more than one access nodes, then complete the following steps:
      1. In the Shared job results path box, enter the UNC path to a network location where you want backup jobs to stage data.
      2. Enter a path that is always accessible to the access nodes.
      3. In the Account to access shared path box, enter the credentials of an account that has Windows administrative privileges on all the access nodes.
  7. In the Exchange connection settings section, enter the following information:
    1. From the Office 365 cloud region list, select the region that hosts Exchange Online:
      • If Exchange Online is not hosted in a national cloud, select Default (Global Service).
      • If Exchange Online is hosted in a national cloud, select the region.
    2. Select Express configuration (Recommended).
    3. Enter the Office 365 global administrator account user name and password.

      Important: Do not use a personal account. The account that you use is added to all the Teams channels as a member.

    4. Click Create Azure app.

      A Microsoft window displays all the permissions that are required to access the Azure app.

      If the pop-up blocker blocks the Microsoft window, allow access to the Microsoft window.

    5. At the bottom of the Microsoft window, click Accept.
  8. Click Save.

Last modified: 3/15/2021 3:32:33 PM