1 Introduction | 2 Features | 3 Requirements | 4 Preparations | 5 Usage | 6 Examples

3 Requirements

3.1 Modules

3.1.1 Basic

Microsoft.Graph.Authentication

3.1.2 Advanced

ExchangeOnlineManagement

3.1.3 For Azure execution

Az.Accounts

Az.KeyVault

3.2 Permissions

3.2.1 Basic

• Microsoft Graph permission Mail.Send
• Microsoft Graph permission Organization.Read.All
• Microsoft Graph permission User.Read.All

3.2.2 Advanced

• Microsoft Graph permission DeviceManagementManagedDevices.Read.All
• Microsoft Graph permission Policy.Read.All
• Microsoft Graph permission Reports.Read.All
• Microsoft Graph permission RoleManagement.Read.All
• Office 365 Exchange Online permission Exchange.ManageAsApp
• Azure AD role Global Reader

HINT: When granting the Global Reader role to the application, the following Microsoft Graph permissions can be revoked, as they are already included in the role’s permissions.

• Organization.Read.All
• User.Read.All

For further details, please refer to Graph permissions and App-only authentication for Exchange Online.