1 Introduction | 2 Features | 3 Requirements | 4 Preparations | 5 Usage | 6 Examples

4 Preparations

4.1 Execution

• For local execution
  1. Install required modules
  2. Install this module
  3. Generate or request certificate
• For Azure execution
  1. Create Azure automation account
     1. Add required modules
     2. Add this module
     3. Enable system-assigned managed identity
  2. Create Azure key vault
     1. Generate, request or import certificate
     2. Grant role Key Vault Secrets User to automation account’s managed identity

4.2 Authentication

1. Register Azure AD application
2. Add required permissions
3. Upload certificate

4.3 Permissions

1. (optional, recommended) Create Exchange Online application access policy to restrict Azure AD application’s Mail.Send permission to intended sender mailbox

HINT: Most of the preparations for advanced Azure execution mentioned above can be deployed by using the Terraform module available in the GitHub repository, the exception being an Exchange Online application access policy.