How to configure Microsoft 365 settings to perform Microsoft 365 management and reporting via ADManager Plus?

Objective: Configure Microsoft 365 settings to perform Microsoft 365 management and reporting via ADManager Plus.

Solution: ADManager Plus empowers administrators to perform management and reporting across multiple platforms such as Active Directory (AD), Microsoft Exchange, Microsoft 365, Google Workspace, and Skype for Business server, from a single console.

Configuring Microsoft 365 settings is a must for creating, modifying or reporting on Microsoft 365 objects via ADManager Plus.

Prerequisites for configuring Microsoft 365 settings in ADManager Plus:

• The Microsoft 365 tenant account that is to be configured in ADManager Plus must have the permissions as mentioned here.
• Multi-factor authentication should not be enabled for the Microsoft 365 tenant account.
• Microsoft Online or Azure AD module for Windows PowerShell must be installed on the same machine where ADManager Plus is installed.
  Click here to download the Microsoft Online Sign-in Assistant and Azure AD module for Windows PowerShell.
• The 64-bit version of the product must be installed.

Steps for configuring Microsoft 365 settings in ADManager Plus:

1. Login to ADManager Plus and navigate to Domain/Tenant Settings → Microsoft 365 tab.
2. Click Add New Tenant button on the top-right corner.
3. Click Configure the Microsoft 365 Login button to initiate the process. Please use the Global Administrator credentials to log in and authorize. Note that ADManager Plus does not store this credential for security reasons.
   At this stage, the following actions will be executed:
4. An Azure AD application will be created. It will fetch the Microsoft 365 data via Microsoft Graph API.
5. A Service Account that has both Exchange Administrator and View-Only Organization Management roles will be created.
6. Select the required AD domains which are to be linked with this account. It is essential to link the on-premises domains with Microsoft 365 domains as it is needed to apply certain restrictions such as OU-based restrictions.
7. Click Proceed in the dialog box that appears. You will be redirected to the Microsoft 365 login page where you would be required to login with the Global Administrator's credentials.
8. The Microsoft 365 login portal will list the permissions requested for your organization. Once you are informed of these permissions, click Accept.
9. Once the tenant configuration is successful, it will be listed in the Microsoft 365/Google Apps window.

For more details, refer to Microsoft 365 Settings.