Configuration: Configure communication channels

Cayosoft Guardian allows the configuration of notification channels to get notifications and alerts about performed object changes via SMTP, Exchange Online, and Microsoft Teams.

NOTE: To use notification channels, you must apply for a Microsoft 365 license to an Microsoft 365 connection account with assigned Microsoft Teams and Exchange online options.

Adding Teams channel

To add a Teams communication channel:

1. In Cayosoft Guardian, navigate to Configuration > Communication Channels.
2. Select Teams communication channel.
3. Enter the following:
   • Name * – The display name for the Teams channel.
   • Description – Enter the description of the channel.
   • Default Team * – Specifies the default Microsoft Teams team to use (e.g., "General").
   • Default Channel * – Specifies the default channel within the selected team (e.g., "General").
   • Tenant – The Microsoft 365 tenant identifier (e.g., example.onmicrosoft.com).
   • Mention team – Mention (@team) in notifications.
   • Mention channel – Mention (@channel) in notifications.

Adding Exchange Online channel

1. In Cayosoft Guardian, navigate to Configuration > Communication Channels.
2. Select Exchange Online Communication Chanel.
   • Name * – A display name for the channel.
   • Description – An optional field to provide details about the channel’s purpose.
   • Sender * – The email address that will be used as the sender. This should be connected to your tenant.
   • Recipients – The list of email addresses from the To field that will receive notifications.
   • CC Recipients - The list of email addresses from the CC field that will receive notifications.

   • BCC Recipients - The list of email addresses (a copy of the email but conceals their email address from all other recipients) from the BCC field that will receive notifications.
      

3. Click Create.

Adding SMTP channel

1. In Cayosoft Guardian, navigate to Configuration > Communication Channels.
2. Click +Add and select SMTP communication channel from the dropdown list.
3. Enter the following:
   • Name * – The display name for the SMTP channel.
   • Description – An optional text field for describing the purpose of the channel.
   • Mail Server * – The SMTP server address (e.g., smtp.office365.com).
   • Mail Server Port – The port number for the SMTP server (e.g., 587 for SSL).
   • Send Timeout – The duration (in seconds) to wait before sending an email (e.g., 3).
   • Encrypted Connection (SSL) – Enable SSL encryption.
   • Credentials:
     • Account Name * – The email address used for authentication which should be added to the managed system.
     • Password – The corresponding password for authentication.
     • Type * – The authentication type (e.g., Generic).
     • Sender * – The email address that will appear as the sender. This should be connected to your tenant.
     • Recipients – The list of email addresses from the To field that will receive notifications.
     • CC Recipients - The list of email addresses from the CC field that will receive notifications.

     • BCC Recipients - The list of email addresses (a copy of the email but conceals their email address from all other recipients) from the BCC field that will receive notifications.

Configuring credentials

NOTE: No membership in any Microsoft 365 roles is required for communication channel connection accounts.

Use the Change Credential action on communication channels to assign a non-privileged user as the connection account.

This action creates Guardian credentials of type Communication channel, which can be reused for multiple channels if needed.

During the first step of the Change Credential wizard, users are prompted to enter a Administrative account name. This account is used temporarily to grant the minimal required permissions to the less-privileged user specified on the next page(s) of the wizard.

1. Double-click the communication channel and navigate to Change credential.

   

2. In the opened wizard, specify:
   1. For Exchange Online / Microsoft Teams:

      • Administrative account name and click Grant>Next.

        

      • Select the user on the next screen.

        

   2. For SMTP specify User account and Password and click Next.

      

To update the password credentials:
 

1. Click Create.

2. Click the edit icon next to Credentials to configure credentials.

3. To add new credentials, click +Add and select either Token or Password credentials.
4. To add Token credential, enter the following and click Create:
   • Account Name * – The account name for the token credential.
   • Refresh Token – The refresh token, which is used for renewing authentication without requiring user interaction.

   • Type * – The type of token credential.

5. To add Password credential, enter the following and click Create.

   • Account Name * – The email address used for authentication.
   • Password – The corresponding password for authentication.
   • Type * – The authentication type (e.g., Generic).

   

NOTE: Application credentials with full administrative permissions can be used for the Exchange Online channel, although this configuration is not officially supported or tested. Application credentials cannot be used for Teams channels.

Configuring channels

After creating the channel:

1. Click Test to check the configuration. When the channel is configured, the checkbox will be enabled and inactive.
2. Click Disable to disable the configured channel.

3. Set it as mail default by clicking the corresponding action.

4. After adding the credentials, you can perform the following:
   • Search – Use the search bar to find specific credentials by account name or type.
   • Refresh – Reload the credentials list to display the most recent updates.
   • Add – Add new credentials if necessary for authentication.
   • Properties – View and edit the properties of the selected credential, such as updating passwords or modifying settings.
   • General – General details about the channel, such as its name, description, and configuration settings.
   • Connected Systems - The systems or services the channel interacts with.
   • Health Check History - Logs of past health check results.
   • Delete – Remove credentials that are no longer needed.
   • Select a Credential – Choose the appropriate credential to associate with a communication channel or service.

To rename the channel:

1. Click the edit icon next to the channel name.
2. Enter a name.
3. Enter the description.
4. Click Yes to apply the change or No.