Skip to main content

Incident ResponderIncident Responder Documentation

Configure the Microsoft Outlook Office 365 Service

Configure Microsoft Outlook Office 365 as a service to delete emails and search for emails using actions.

  • If your Microsoft Exchange Online account uses OAuth2.0 modern authentication, ensure you complete certain tasks.

  • In the Microsoft Exchange admin center (EAC), ensure you have an admin role group with ApplicationImpersonation and View-Only Recipients permissions.

  • Assign an Microsoft Outlook Office 365 account with an active mailbox the admin role with ApplicationImpersonation and View-Only Recipients permissions. You use the email address and password for this account later.

  • If you use a proxy, ensure that you whitelist https://reports.office365.com/

  1. In the navigation bar, click the menu The menu icon in the navigation bar; three white lines on a green background., select Settings, then select Core.

  2. Under SERVICE INTEGRATIONS, select Services.

  3. Select a service:

    • To configure a specific service, hover over a service, then click CONFIGURE. Use the search by vendor or filter by action to find a service.

    • To manually provide the relevant information for a service, click Configure a new serviceA blue circle with a white plus sign..

    • To view all actions for a service, hover over a service, then click the information icon An icon of a grey i inside a grey circle..

  4. Enter information about the service:

    • Service Name – Enter a unique name for the service. By default, the service name is Microsoft Exchange Email.

    • (Optional) Description – Describe the service.

    • (Optional) Owner – Enter the email address of the person or group responsible for the service. 

    • Host – Enter your mail server name; for example, outlook.office365.com.

    • Username – Enter the email address of a Microsoft Outlook Office 365 account with an active mailbox and specific permissions.

    • Password – Enter the password to the Microsoft Outlook Office 365 account.

    • Clientid – Enter the application (client) ID.

    • Client Secret – Enter the client secret you previously added.

    • Tenant Id – Enter your Azure AD tenant ID.

    • Version – Select the version of your Exchange server: EXCHANGE 2010 SP2, EXCHANGE 2010 SP1, or EXCHANGE 2010. If you don't know the version of your Exchange server, select AUTONEGOTIATE.

  5. To validate the source, select TEST CONNECTIVITY.

  6. Select CREATE SERVICE.