Tools4everBV / HelloID-Conn-Prov-Target-ExchangeOnline

Exchange Online - Target - Permissions
0 stars 0 forks source link

Release-v2.0.0 #1

Closed rschouten97 closed 1 year ago

rschouten97 commented 1 year ago

Changed to use of Access Token Authentication instead of Certificate Based Authentication Removed building an additional PS session to hold the EXO session Added check if all mandatory values from the configuration object are available Added check if the correlation fields are available Added check if all mandatory values from the account object are available Updated logging to latest best practices

rschouten97 commented 1 year ago

An App Registration in Azure AD is required. Please follow the Microsoft documentation as reference to configure the App Registration correctly

The link is based on a certificate

An App Registration in Azure AD is required. Please follow the Microsoft documentation as reference to configure the App Registration correctly

The link is based on a certificate

The official Microsoft Documentation still only references the use of Certificate Based Authentication. I removed the notes that you should follow the microsoft docs and added notes that our setup differs by using the access token.

rschouten97 commented 1 year ago

Microsoft Exchange Online PowerShell V2 module

Change to V3.1 (multiple times in readme)

Changed all references from v2 to v3.1. However, the microsoft docs articles still have the v2 url, I left this unchanged of course.

rhouthuijzen commented 1 year ago

Possibly change Azure AD role:

Assign Azure AD roles to the application Azure AD has more than 50 admin roles available. The Global Administrator

The Global Administrator Rol is not required for the following ExO functions (tested):

"Get-EXOMailbox"
"Set-MailboxFolderPermission"
"Get-MailboxFolderStatistics"
"Add-MailboxFolderPermission"
"Remove-MailboxFolderPermission"
"Remove-MailboxPermission"
"Remove-RecipientPermission"
"Get-User"
"Add-MailboxPermission"
"Add-RecipientPermission"
"Set-Mailbox"