Can't find what you're looking for? Access our previous PDF-based library.
2 min read
️ Updated Dec 02, 20251. Configure the Exchange Online Component
1.1 Register an App and Generate the Client ID, Secret Key and ThumbPrint for Exchange Online Auditing
For information on this please use the following link and follow the steps described:
https://learn.microsoft.com/en-us/powershell/exchange/app-only-auth-powershell-v2?view=exchange-ps
Note: The user should copy Client ID and Thumbprint as needed for Login Information.
2. Permissions for the Auditing Exchange Online
Select Microsoft API’s and API’s my organization uses as follows:
Microsoft 365 Graph API’s, Office 365 Management API’s and select permission type(s) as detailed below:
Microsoft Graph
MailboxSetting.Read | Application | For Enumerating the User Mailbox who has Exchange Online License for Auditing |
User.Read.All | Application | For Enumerating the User Mailbox who has Exchange Online License for Auditing |
Microsoft 365 Exchange Online
Exchange.ManageAsApp | Application | For Providing the Permission to Client Id and Secret Key to Manage Exchange as Application |
Exchange.ManageAsApp | Delegated | For Enumerating the User Mailbox who has Exchange Online License for Auditing |
MailboxSettings.ReadWrite | Delegated | Read and write all user mailbox settings |
Microsoft 365 Management APIs
ActivityFeed.Read | Delegated | For Providing Permission to application to Read Activity Data of your Organization for Auditing. |
ActivityFeed.Read | Application | For Providing Permission to application to Read Activity Data of your Organization for Auditing. |
3. Assigning the Role to the Application
Log into the Entra ID Portal (https://portal.EntraID.com) through Global Admin
Select view button below Manage Microsoft Entra ID
Under Roles and Administrators select Global Reader and double click on it to Add assignments
In Add Assignments go to Select Member(s) then click add and select the newly created Application then click Next
Then the Assignment Type will be eligible. Unlock permanently eligible and selection assignment duration and click Assign
Under Roles and Administrators assign Exchange Administrator by following above steps.
NOTE: Global Reader: This is required for providing permission to the Application so that it can read different audit log events by using different technologies