To add a new Microsoft Office 365 organization, specify the following:
- Region. Select Microsoft Azure region to which the organization belongs. Usually, this will be the Default region. However, you may need to choose Germany or China if your Office 365 belongs to the corresponding Microsoft Azure region. Such organizations will be displayed with an icon having the matching state flag next to it.
- Username and Password. Enter credentials to connect to the Microsoft Office 365 organization. You can use any of the following formats: email@example.com or firstname.lastname@example.org.
- Make sure the Grant impersonation to this user checkbox is selected. This will allow the service to archive mail from another users’ mailboxes. Click Next.
You may have impersonation granted manually, for example, via PowerShell (see Required Permissions section). However, if impersonation was not granted, Veeam Backup for Microsoft Office 365 will display an error message when checking organization parameters. Further mailbox processing will not be possible.
Veeam will verify the connection settings you have provided, including connection to the Exchange Web Services (EWS) and PowerShell, as well as the necessary roles assignment for the specified account.
A warning can appear in case when specified user account was not assigned the Application Impersonation role in advance, prior to running the wizard. Veeam will try to perform role assignment. If the parameter check returns Success after the re-run, you can proceed with finishing the wizard; if it returns Failure, you may need to exit the wizard and check the required permissions. Contact your Exchange Online administrator, if necessary.
Added Office 365 organization will be displayed under the Organizations node in the navigation pane of the Organizations view.
If impersonation was granted manually using PowerShell with some accounts filtered out ("partial impersonation"), then you will see the corresponding message. If you decide to fully grant impersonation, you can re-run parameters check after granting the impersonation.