Power365 Current - Minimal Permissions Model for Power365 Basic Projects How-To Guide

Limitations

• This solution can only be implemented on Power365 Basic projects. This solution cannot be used on Advanced or Premium projects, as Basic Authentication is required to be configured in the Power365 project.

Known Issues and Errors

This section outlines any known issues with using the minimal permissions model and any Errors that might be seen using this model.

Sync Operations

When a Mailbox Synchronization is started, although Power365 displays “Syncing”, the following error is found in the log file:

Error validating Mailbox permission with credentials:The auth type used is NetworkCredential; UserName is <P365 Service Account> against mailbox: <Source/target Mailbox> with exception: The specified object was not found in the store., The process failed to get the correct properties.

This error indicates that the Power365 service account does not have permissions to the source or target mailbox. In order to resolve this issue:

• Ensure that Management Scope and roles have been configured correctly as outlined in the procedures above.

• Ensure that the source and/or target mailboxes are members of the Distribution Group configured within the Management Write scope.

Cutover Operations

During the cutover process, the following messages will be seen in the cutover logs:

Error Message

Unable to send message to <Source mailbox address>. Unexpected error sending message via Graph to MPH. [TenantId #615, UserId #3022891]

Exception

System.Exception: API exception encountered in 'GetAccessInfo' [StatusCode=InternalServerError, Method=GET]. ---> System.Exception: {"Message":"An error has occurred."}

   --- End of inner exception stack trace ---

   at BTCloud.Lib.SecureApiServiceBase.CheckResponse(IRestResponse response, String actionName, Method method)

   at BTCloud.Lib.SecureApiServiceBase.ExecuteRequest[T](String actionName, Object parameters, Method method)

   at BTCloud.Lib.GraphServiceFactory.Create(Int32 clientId, Int32 tenantId)

   at T2T.Model.Tenant.GetGraph()

   at T2T.Model.User.SendMessageGraph(INLogLogger log, String subject, String body, Boolean bodyIsHtml)

Impact

The error indicates that the cutover email cannot be sent via the Graph API. However, Power365 will send the message using PowerShell as seen in the log message:

Sent CutoverProfile message to <Source mailbox>, via PowerShell. Sender will appear as <P365 Service Account>. [UserMigrationId #468219, Culture en-US]

Therefore, the impact of this error is minimal and does not affect functionality.

Sync Operations

This section outlines any known issues with using the minimal permissions model and any Errors that might be seen using this model.

Sync Operations

When a Mailbox Synchronization is started, although Power365 displays “Syncing”, the following error is found in the log file:

Error validating Mailbox permission with credentials:The auth type used is NetworkCredential; UserName is <P365 Service Account> against mailbox: <Source/target Mailbox> with exception: The specified object was not found in the store., The process failed to get the correct properties.

This error indicates that the Power365 service account does not have permissions to the source or target mailbox. In order to resolve this issue:

• Ensure that Management Scope and roles have been configured correctly as outlined in the procedures above.

• Ensure that the source and/or target mailboxes are members of the Distribution Group configured within the Management Write scope.

Cutover Operations

During the cutover process, the following messages will be seen in the cutover logs:

Error Message

Unable to send message to <Source mailbox address>. Unexpected error sending message via Graph to MPH. [TenantId #615, UserId #3022891]

Exception

System.Exception: API exception encountered in 'GetAccessInfo' [StatusCode=InternalServerError, Method=GET]. ---> System.Exception: {"Message":"An error has occurred."}

   --- End of inner exception stack trace ---

   at BTCloud.Lib.SecureApiServiceBase.CheckResponse(IRestResponse response, String actionName, Method method)

   at BTCloud.Lib.SecureApiServiceBase.ExecuteRequest[T](String actionName, Object parameters, Method method)

   at BTCloud.Lib.GraphServiceFactory.Create(Int32 clientId, Int32 tenantId)

   at T2T.Model.Tenant.GetGraph()

   at T2T.Model.User.SendMessageGraph(INLogLogger log, String subject, String body, Boolean bodyIsHtml)

Impact

The error indicates that the cutover email cannot be sent via the Graph API. However, Power365 will send the message using PowerShell as seen in the log message:

Sent CutoverProfile message to <Source mailbox>, via PowerShell. Sender will appear as <P365 Service Account>. [UserMigrationId #468219, Culture en-US]

Therefore, the impact of this error is minimal and does not affect functionality.

Cutover Operations

This section outlines any known issues with using the minimal permissions model and any Errors that might be seen using this model.

Sync Operations

When a Mailbox Synchronization is started, although Power365 displays “Syncing”, the following error is found in the log file:

Error validating Mailbox permission with credentials:The auth type used is NetworkCredential; UserName is <P365 Service Account> against mailbox: <Source/target Mailbox> with exception: The specified object was not found in the store., The process failed to get the correct properties.

This error indicates that the Power365 service account does not have permissions to the source or target mailbox. In order to resolve this issue:

• Ensure that Management Scope and roles have been configured correctly as outlined in the procedures above.

• Ensure that the source and/or target mailboxes are members of the Distribution Group configured within the Management Write scope.

During the cutover process, the following messages will be seen in the cutover logs:

Error Message

Unable to send message to <Source mailbox address>. Unexpected error sending message via Graph to MPH. [TenantId #615, UserId #3022891]

Exception

System.Exception: API exception encountered in 'GetAccessInfo' [StatusCode=InternalServerError, Method=GET]. ---> System.Exception: {"Message":"An error has occurred."}

   --- End of inner exception stack trace ---

   at BTCloud.Lib.SecureApiServiceBase.CheckResponse(IRestResponse response, String actionName, Method method)

   at BTCloud.Lib.SecureApiServiceBase.ExecuteRequest[T](String actionName, Object parameters, Method method)

   at BTCloud.Lib.GraphServiceFactory.Create(Int32 clientId, Int32 tenantId)

   at T2T.Model.Tenant.GetGraph()

   at T2T.Model.User.SendMessageGraph(INLogLogger log, String subject, String body, Boolean bodyIsHtml)

Impact

The error indicates that the cutover email cannot be sent via the Graph API. However, Power365 will send the message using PowerShell as seen in the log message:

Sent CutoverProfile message to <Source mailbox>, via PowerShell. Sender will appear as <P365 Service Account>. [UserMigrationId #468219, Culture en-US]

Therefore, the impact of this error is minimal and does not affect functionality.