You are here: Before You Start > Prerequisites > User-based authentication to Office 365

User-based authentication to Office 365

Promodag Reports can collect information from your Office 365 tenant through a user with specific permissions. It is possible to use an existing account; however, we recommend creating a dedicated user for that purpose. This account must not be subject to multi-factor authentication (MFA). You can make this choice in the Configuration Wizard or in the Office 365 configuration tab of Tools > Options.

Create a user account for Promodag Reports

Sign in to Microsoft 365 Admin Center as an administrator.
Click Users > Active users and select Add a user.
Choose a Display name and a user name, for example 'Promodag user'.

Assigning the appropriate roles to the Office 365 Promodag user

Sign in to Microsoft 365 Admin Center as an administrator.
Click Admin > Exchange to open the Exchange Admin Center.
Click Roles > Admin roles and then click Add role group.
In the Set up the basics window that appears, enter a name and a description pour this new group, for example 'Promodag Reports Role Group'.
In Permissions, select the Mail Recipients and View-Only Recipients roles.
In Admins, add the Promodag user.
Click Add role group.

Allowing reports on mailbox content

Some additional conditions must be met to allow Promodag Reports to retrieve the content of mailboxes when running the reports of the Mailbox Content category:

The Promodag user must be assigned a user mailbox and therefore an Office 365 license.
Grant the ApplicationImpersonation role to the Office 365 Promodag user. To assign this role, please edit the role group created at the previous step, open the Permissions tab and add the ApplicationImpersonation role.
If you use Modern Authentication with Office 365, authorize Promodag Reports in Microsoft Entra ID. To perform this task, open the application, go to Tools > Options, test your connection in Office 365 configuration and follow the instructions provided .

Note: In February 2024, Microsoft announced that the ApplicationImpersonation role would be removed from the Exchange Online user interface in May 2024, while its complete removal is scheduled for February 2025. The only solution will be to switch to Certificate-based authentication.