Give the Azure Service Account Access to the Exchange Online Mailboxes, in a Modern Authentication Environment

Give the Azure service accounts access to the Exchange Online mailboxes, in a modern authentication environment.

Procedure

1. Log on to the Azure portal using your global administrator account.

2. Go to Azure Active Directory.

3. Create a user

4. Disable multi-factor authentication for the user.

5. Ensure that the conditional access policy does not block powershell access of the service account.

6. Assign the user to the Exchange administrator role.

7. Go to the Microsoft 365 Exchange Admin Center.

8. Create a custom role with the View-Only Recipients permission.

9. Add the user to the custom role.

Related Topics

For more information about creating a user, see Add or delete users using Azure Active Directory in the Microsoft documentation.