Add Roles to Microsoft 365 User Account

Cohesity DataProtect as a Service accesses your Microsoft 365 domain with a user account to back up your Microsoft Exchange Online data. You can either add these roles to an existing user account or create a new user account with these roles.

Ensure that multi-factor authentication is not enabled for the user account.

To add roles to the Microsoft 365 user account:

  1. Log in to Microsoft 365.

  2. In the Office 365 page, click Admin.

  3. In the Microsoft 365 admin center page, select Admin centers, and then click Exchange.

    Follow the steps for Classic Exchange admin center in Step 4 next, or skip to Step 5 if you are in the new Exchange admin center page.

    TIP: If you see a message prompting you to switch to New Exchange, you are still in classic Exchange.

  4. To add roles from the Classic Exchange admin center page:

    1. Click Permissions and then select the Admin roles tab.

    2. In the Admin roles tab, click + to create a new role group.

    3. In the new role group page, enter a Name and Description, and under Roles, click +.

    4. In the Write scope drop-down, select Default and click Next.

    5. In the Select a Role page, select the following roles, click Add, and then OK:

      • Mail Recipients

      • Mailbox Search

      • View-Only Configuration

      • View-Only Recipients

    6. Under Members, click + to add the user account you plan to use to register the Microsoft 365 domain with Cohesity DataProtect as a Service, then click OK.

    7. Click Save to create the Role Group.

    You are ready to update your Microsoft 365 Org setting for Mailbox size reporting.

  5. To add roles from the new Exchange admin center page:

    1. Select Roles > Admin roles.

    2. In the Admin roles page, click Add role group.

    3. Under Basics, enter a Name and Description for the admin role.

    4. In the Write scope drop-down, select Default and click Next.

    5. Under Permissions, select the following and click Next:

      • Mail Recipients

      • Mailbox Search

      • View-Only Configuration

      • View-Only Recipients

    6. Under Admins, search and select the user account you plan to use to register the Microsoft 365 domain with CCohesity DataProtect as a Service, then click Next.

    7. Under Review and finish, review the configuration and click Add role group.

  6. After the role group is added, click Done.

You are ready to update your Microsoft 365 Org setting for Mailbox size reporting.