Using the user-based connection account wizard in Microsoft 365 extension

Overview

IMPORTANT: Starting v13.2.1, Cayosoft Administrator starts the transition to the app-based authentication in the Microsoft 365 extension using a service principal app. New deployments won't feature the user-based connection account wizard described in the article; instead, a wizard to create a service principal app will be presented. Refer to the following article for additional information: Configure service principal connection account in Microsoft 365 extension.

The Microsoft 365 extension in Cayosoft Administrator requires a dedicated user-based connection account to connect to the target tenant and collect and manage data. Cayosoft Administrator has a dedicated wizard to connect to the target tenant using an existing account and create a new connection account with the required roles assigned. The wizard ensures the correct operation of the extension as the connection account gets the required role assigned to it.

You can access the account wizard in the following two scenarios:

• When setting up the Microsoft 365 extension via the initial configuration wizard. The Microsoft 365 extension must be selected to be enabled.

• When setting up the Microsoft 365 extension in the Cayosoft Administrator settings.

This article describes the step-by-step walkthrough of the connection account wizard for the Microsoft 365 extension.

Prerequisites

An account with the Global Admin role assigned is required to create a dedicated connection account for the Microsoft 365 extension. The account is used once to connect to your tenant, connect and register Cayosoft Administrator as an identity provider, and register the Cayosoft Administrator API Access app to allow access to your tenant via Cayosoft Administrator API.

Instructions

0. Depending on your scenario, navigate to the Microsoft 365 extension settings.

   • In the initial configuration wizard, enable the Microsoft 365 extension and navigate to the extension configuration page.

   • After the initial setup, navigate to Configuration > Connected system extensions > Microsoft 365 in the Cayosoft Administrator Console.

1. Click ... in the Microsoft 365 credentials setting.

2. Click Create to start the wizard. Click Next to proceed.

3. In the Username box, specify a custom account name with your Entra ID tenant name. In the Password box, specify a password to assign it to the new account.

4. Click Create to create the account. When you click Create, a login window is prompted to sign in with a user account with the Global Admin role. Specify the credentials and click Sign in.

5. Grant the permissions requested by clicking Accept. Wait for the user account to be created and the Cayosoft Administrator app to be registered in your tenant. When the user is created, the Connection account created message is prompted; click Next to proceed.

6. Sign in with the newly created account to grant access to the Cayosoft Administrator API Access app. Copy the password and click Sign in to sign in your tenant with the new account. Click Accept to grant the permissions. Click Next to proceed.

7. Grant consent to the connection account to collect and manage data in your tenant via Cayosoft Administrator API—click Grant to log in using the newly created account. Review and grant the requested permissions by clicking Accept.

8. Click Finish to complete the wizard. Cayosoft Administrator automatically replaces the previously used credentials with credentials of the new user. Click OK to finish the setup.