User-based authentication to Office 365
Promodag Reports can collect information from your Office 365 tenant through a user with specific permissions. It is possible to use an existing account; however, we recommend creating a dedicated user for that purpose. This account must not be subject to multi-factor authentication (MFA). You can make this choice in the Configuration Wizard or in the Office 365 configuration tab of Tools > Options.
Create a user account for Promodag Reports
Assigning the appropriate roles to the Office 365 Promodag user
- Sign in to Microsoft 365 Admin Center as an administrator.
- Click Admin > Exchange to open the Exchange Admin Center.
- Click Roles > Admin roles and then click Add role group.
- In the Set up the basics window that appears, enter a name and a description pour this new group, for example 'Promodag Reports Role Group'.
- In Permissions, select the Mail Recipients and View-Only Recipients roles.
- In Admins, add the Promodag user.
- Click Add role group.
Allowing reports on mailbox content
Some additional conditions must be met to allow Promodag Reports to retrieve the content of mailboxes when running the reports of the Mailbox Content category:
- The Promodag user must be assigned a user mailbox and therefore an Office 365 license.
- Grant the ApplicationImpersonation role to the Office 365 Promodag user. To assign this role, please edit the role group created at the previous step, open the Permissions tab and add the ApplicationImpersonation role.
- If you use Modern Authentication with Office 365, authorize Promodag Reports in Azure AD. To perform this task, open the application, go to Tools > Options, test your connection in Office 365 configuration and follow the instructions provided .
Note : The ApplicationImpersonation role is about to be deprecated (May, 2024) and it will no longer be possible to run reports on mailbox and public folder content.