Microsoft Exchange Connector Prerequisites

The following tables details the permissions required to use the BA Insight Microsoft Exchange connector:

User Accounts and Application Permissions

Required Permission	Description
Active Directory A directory service for Windows domain networks. A hierarchical structure that stores information about objects on the network. Used to manage permissions and control access to critical network resources.	Exchange Online The account user in the Authentication Mechanism OAuth Specifies a process for resource owners to authorize third-party access to their server resources without providing credentials. process must have: ApplicationImpersonation permissions/role over the accounts and mailboxes to be indexed Mailbox Search permissions on the Exchange Server View-Only Audit Logs / Audit Logs role on the account or Records Management / Organization Management role group (plus audit logging enabled for mailboxes). Additional Roles - see Roles and Permissions below.
Domain Account	The domain account must have: READ access to the Exchange Accounts list. A mailbox in Exchange (to support public folders).
Roles and Permissions	Role/Role Group Either of the following must be used: Role: View-Only Audit Logs/Audit Logs role (over the account) Role Group: Records Management/Organization Management role group (plus audit logging-enabled for mailboxes)

Features	Supported	Additional Information
Application version	Exchange Online	Exchange Online Accessed via EWS Supported: Private Mailboxes Archives Public folders NOT supported
Searchable content types	Yes	All content types.
Content Update	Full and Incremental	All BA Insight Connectors support both Full and Incremental crawls, unless noted.
Permission Types	Yes	All BA Insight Connectors support fetch ACLs from the source system Your Source System is the repository where your data is stored (data to be indexed). This repository is managed by applications such as: - SharePoint O365 - SharePoint 2013/16/19 - Documentum - File Share - OpenText - Lotus Notes - etc. Your Source System repository can also be a database such as SQL or Oracle.. To make items *public* or *restricted* to a single user/set of users, you can do so within the Connector Framework. The Exchange domain and the Connectivity Hub or Connector Framework domain must be trusted in order for security trimming to work.
Required Software	.NET Framework v4.7.2 .NET Framework v3.5 - for MSI installer	Connector Framework or Connectivity Hub must be installed. The PowerShell module "ExchangeOnlineManagement" must be installed.
Exchange Powershell management		Open Powershell as an admin and run the following command: `Install-Module -Name ExchangeOnlineManagement -Force`