Configuring the Office 365 module
The Archive Shuttle Office 365 module ingests data into Office 365 mailboxes using the Advanced Ingestion Protocol (AIP) and optionally Exchange Web Service (EWS), utilizing an Azure Registered Application.
Configure the Office 365 Module
The Office 365 module needs credentials so it can connect to Office 365.
For authentication under modern authentication (OAuth) in Archive Shuttle, go to the Archive Shuttle Planning Guide.
Configure Application Impersonation
For the Azure Registered Application to be used to ingest data into Office 365 mailboxes, the EWS Application impersonation rights need to be assigned to the registered application. This can be done in the Microsoft Azure portal. To perform the required steps, click here.
Configure Access to Office 365 Through a Proxy Server
This information only applies to users using proxy servers. Click here for more information.
Providing credentials to connect to Office 365
You can use Modern Authentication (OAuth) to provide credentials to connect to Office 365. To do this, add the Modern Authentication (OAuth) credentials using the Credential Editor. Go to the Archive Shuttle Planning Guide for more information.
|
|
NOTE: As of Archive Shuttle 11.1, basic authentication in Windows Remote Manager (WinRM) needs to be enabled only in the case of collecting retention labels. Click here for more information. |
Configuring Application Impersonation
In order for the accounts specified above to be used to ingest data into Office 365 mailboxes of Personal Archives, the Application Impersonation role needs to be assigned to the user. This can be done in the Office 365 Portal or via PowerShell.
To do the required steps using PowerShell, follow the steps below:
1.Log in to a server that has Windows PowerShell installed
2.Issue the following commands in PowerShell, comments and responses are noted below each command:
$User-Credential = Get-Credential
Supply values for the following parameters:
Credential
A pop-up will appear asking for a username and password. The Global Administrator that needs to have Application Impersonation granted to them should be input.
|
|
NOTE: The Exchange Online Management PowerShell module is required. To learn more, click here. |
Connect-ExchangeOnline -UserPrincipalName name@domain.com
This connects a PowerShell session to Office 365 using the credentials that were just entered.
Import-PSSession $Session
This activates the above session. It may take a few seconds for this to return to the command prompt.
New-ManagementRoleAssignment Name:VaultAdminImpersonation Role:ApplicationImpersonation User:<upn>
This grants the user specified the Application Impersonation role.
|
|
NOTE: Customers may have a standard system for naming role assignments. That naming convention can be used, but the required role is fixed by Office 365 Application Impersonation. |
For more on Application Impersonations, click here.
Configuring Office 365 connection rather than autodiscover
Normally the Office 365 Module will use the default configuration and be able to contact Office 365. In some situations it might be necessary to configure a specific URL to access Office 365. This can be done on the System Configuration page as follows:
1.Go to the System Configuration page in Archive Shuttle.
2.Click on Office 365 Module
3.Locate the Connection URL entry near the bottom, and update it to show the required value.
4.Click Save to commit the changes.