Microsoft MSOnline module retirement

IMPORTANT: The following steps are mandatory for instances with the MSOL connection enabled and instances of Cayosoft Administrator v11.3.4 and earlier. 

Overview

Following the module deprecation in March 2024, Microsoft ends the support of the MSOnline PowerShell module and retires it. In Cayosoft Administrator v11.4.0, Cayosoft introduced the option to disable the MSOnline module to prepare for the transition from the MSOnline PowerShell module to the Microsoft Graph API. This allowed Cayosoft to align with the direction of Microsoft and prepare for the planned retirement of the module. To ensure your Cayosoft Administrator instance operates correctly after the retirement, review the article and follow the listed steps to migrate from the MSOnline module to the Graph API.

NOTE: For additional information, refer to the following article: MSOnline and AzureAD PowerShell retirement | Microsoft Community Hub.

Affected scope

The following functionality is affected by the imminent retirement of the MSOnline module:

• The Microsoft 365 extension.

• Microsoft 365-based functionality, including but not limited to the following items:

  • Automation rules and web query rules.

  • Web action rules.

  • Dynamic groups.

The following example is an error expected in an environment with the MSOnline module enabled after the retirement:

Access Denied. You do not have permissions to call this cmdlet

Preparations

Refer to the list of steps to prepare for the MSOnline retirement:

1. Establish the current version of Cayosoft Administrator in your environment. In the Cayosoft Administrator Console, review the version number in the bottom right corner. Alternatively, navigate to Configuration > Settings > Version information.

2. Review the list of deprecated rules to prepare your existing rules for the migration. Refer to the following article for additional information: Deprecated rules.

Mitigation

Depending on the current state of your Cayosoft Administrator instance, refer to the listed scenarios:

• Scenario A—Cayosoft Administrator v11.4.0 and newer instances.

• Scenario B—Cayosoft Administrator pre-v11.4.0 and earlier instances.

Scenario A

Cayosoft Administrator v11.4.0 and newer versions allow to instantly switch your Microsoft 365 extension to use the Graph API. Refer to the following steps:

1. In the left pane of the Cayosoft Administrator Console, navigate to Home > Configuration > Connected Systems Extensions > Microsoft 365.

2. In the Microsoft 365 extension settings, navigate to the Advanced Settings section.

3. Locate the Connect to Microsoft Online Data Service (MSOL) setting. Select the No value from the drop-down list. Save the changes.

Your Cayosoft Administrator instance will now reconnect to your Entra ID tenant. Review the rules set up in your environment and migrate the affected rules: Deprecated rules.

Scenario B

Instances of Cayosoft Administrator pre-v11.4.0 heavily rely on the use of MSOnline module in the Microsoft 365 extension. Once Microsoft retires the MSOnline module, the pre-v11.4.0 instances of Cayosoft Administrator won't be able to collect data and process rules based on the MSOnline module.

To continue using your Cayosoft Administrator instance with the Microsoft 365 extension after the MSOnline retirement, you must update your Cayosoft Administrator instance. Refer to the following article for additional information on the upgrade workflow: Cayosoft Administrator upgrade guide. For additional information on the affected rules, refer to the following article: Deprecated rules.

Once your Cayosoft Administrator instance is up-to-date, review the steps of the Scenario A to disable the MSOnline module in your Microsoft 365 extension.

Troubleshooting

• Microsoft may cause outages affecting the operation of MSOnline-based systems. If the exception error Microsoft.Online.Administrator.Automation.MicrosoftOnlineException is prompted, the outage is in progress. Refer to Scenario A or Scenario B based on your current version of Cayosoft Administrator to prevent future cases of outages affecting your environment.