Creating a New User in the Office 365 Portal

To monitor Microsoft Exchange Online, the eG agent has to be configured with the credentials of a user who has been assigned the Global reader role and is vested with the View-Only Audit Logs, View-Only Recipients, Mail Recipients, and Mail Import Export permissions. While you can use the credentials of any existing O365 user with the aforesaid privileges, it is recommended that you create a special user for monitoring purposes using the Office 365 portal and pass the credentials of that user to the eG agent. To create a new user using the Office 365 portal and assign the required privileges to that user, follow the steps detailed below:

1. Using a browser, connect to the Office 365 portal. The default URL of the portal is: https://portal.office.com
2. Login to the portal as a user with administrator privileges.

3. Figure 119 will then appear.

   

   Figure 119 : Welcome page of the Office 365 portal

4. Click on Admin under Apps (in Figure 119). The Microsoft Office 365 Admin Center will then appear. Expand the Users drop-down list and click on Active users (see Figure 120).

   

   Figure 120 : The Microsoft Office 365 Admin Center

5. To create a new user, click on the Add a user link in Figure 120.

6. Figure 121 will then appear.

   

   Figure 121 : Adding a new user

7. Provide the First name, Last name, and Display name of the new user. Then, provide a Username, which will be automatically suffixed with the domain name of the Domain you have logged into. Click the Next button to select the geographic location of the new user.

   

   Figure 122 : Choosing the geographic location of the new user

8. Then, select the geographic Location of the new user. Turn On the Create user without product license flag in Figure 122.

9. Clicking the Next button in Figure 122 will reveal Figure 123. Here, select the Admin center access option.

   

   Figure 123 : Selecting the Admin center access

10. For the purpose of monitoring, the new user should be assigned the Global reader role. Select this role from Figure 123.

11. Click the Next button in Figure 123 to review your selection which appears in Figure 124.

    

    Figure 124 : Reviewing your selection

12. Finally, click the Finish adding button in Figure 124 to add the new user. Figure 125 will then appear providing a quick summary of details of the user you just created. Office 365 also automatically generates and assigns a password to the new user. Make a note of the Username and Password displayed in Figure 125, as this is what you need to configure against the OFFICE 365 USER and OFFICE 365 PASSWORD parameters of the eG tests.

    

    Figure 125 : Message confirming the successful addition of a user

13. Next, proceed to assign the View-Only Audit Logs, View-Only Recipients, Mail Recipients, and Mail Import Export permissions to the new user. For that, first click on the Admin Center tool in the tool bar depicted by Figure 126. From the menu that pops up, click on Exchange.

    

    Figure 126 : Connecting to the Exchange Admin Center

14. Figure 127 will then appear.

    

    Figure 127 : The Exchange Admin Center

15. From the list of options in the left panel of Figure 127, select permissions. Figure 128 will then appear listing the admin role groups that pre-exist.

    

    Figure 128 : Clicking on the permissions option to view the admin role groups

16. Let us now proceed to create a role group that includes the View-Only Audit Logs, View-Only Recipients, Mail Recipients, and Mail Import Export permissions. For that, click on the button on top of the list of admin role groups (see Figure 128). Figure 129 will then appear.

    

    Figure 129 : Adding a new role group

17. Provide a unique Name and Description for the new role group (see Figure 129). Then, click on the button in the Roles section of Figure 129. Figure 130 will then appear listing the DISPLAY NAMEs of permissions that you want to add to the new role. From this list, select the View-Only Audit Logs, View-Only Recipients, Mail Recipients, and Mail Import Export permissions and click the add -> button to add the permissions. Then, click OK to save the changes.

    

    Figure 130 : Adding the permissions to the new role

18. Figure 131 will then appear. Next, proceed to assign the new role group (that includes the three permissions) to the user you created previously. For that, click on the button in the Members section of Figure 131.

    

    Figure 131 : Clicking on the '+' icon in the Members section

19. Figure 132 will then appear. From the list of user names displayed in Figure 132, select the name of the user you created for monitoring purposes and click the add -> button. Then, click OK.

    

    Figure 132 : Assigning the role group to a user

20. When Figure 133 appears, click the Save button to save the new role group definition.

    

    Figure 133 : Saving the new role group