Configure O365 API for Backups
Protecting your O365 data is essential, and most Data Protection solutions offer api access to O365 data within their application. This ability to ‘let them in’ however needs to be configured both at a global level, and then at an application specific level, within the Azure portal.
First you will want to sign into your Microsoft 365 admin center: https://admin.microsoft.com/AdminPortal
Once signed in, on the left scroll down to Admin centers > Azure Active Directory
Navigate to Azure Active Directory > App Registrations > Click “New registration”
For the New Registration add in a descriptive name, most commonly Choose ‘Single Tenant’ and typically no Redirect. Then click Register at the Bottom.
Most Permissions will be setup in the Microsoft Graph. However there are some (like SharePoint) that aren’t found inside this option, however you will need to navigate through Microsoft Graph and SharePoint to choose the appropriate permissions. If you are using Exchange, then there are additional Exchange permissions as well (such as Office 365 Exchange Online, full access). If not, then the Exchange options don’t even appear.
Once you select the application (Graph or SharePoint) you will select Application permissions
Then you select your permissions below, once finished click ‘Add permissions’ at the bottom
If using Exchange: Select Office 365 Exchange Online API in the list, go to the Application permissions tab and select the “full_access_as_app” permission
Once all the permissions are added MAKE SURE to click ‘Grant admin consent’ above the list of permissions, and confirm
You will need to grant the necessary roles to the user account you will use to authenticate to Azure as well. You can assign the user Global Administrator permissions to accomplish this task, otherwise the roles of: SharePoint Administrator, Site Collection Administrator, Exchange Administrator.