Skip to main content

M365 Automation Setup Guide

Neo performs M365 actions using MS Graph API and PowerShell scripts.

To do that on behalf of an MSP's end client, Neo needs access to the end client's Azure Tenant.

The below steps must be performed for every end client.

The person who executes them should be logged in the end_client's tenant and have Admin permissions

Step 1: Obtain the end client's tenant ID​

  • Below we'll use your end client's tenant ID to authenticate Neo Automations Azure App

  • You can find the Tenant ID in Azure Portal → Microsoft Entra ID:

    Tenant ID

Step 2: Add a company in Neo Dashboard​

  1. Go to https://dashboard.neoagent.io/end-companies and click New Company

New Company

  1. Fill data
    1. Pax8 is Optional. Fill it if you use Pax8 to manage Microsoft Licenses
    2. Custom instructions are Optional. They allow Neo to follow customer-specific rules during Onboarding and Offboarding
  2. Click Create

Company Details

  1. Click on both key icons to grant Application and Delegated access to Neo
    1. You must be logged in Tenant's Directory as Admin with one of Azure AD roles:
      1. Global administrator
      2. Privileged authentication administrator
      3. Authentication administrator
    2. Grant permissions in a standard Microsoft Auth flow

Application and Delegated access

Application access allows Neo to perform actions in Azure. We need it to be able to create users, assign licenses, etc.

Delegated access allows Neo to make actions in Azure on behalf of the signed in Admin. We need it to be able to reset passwords and disable users during Offboarding.

Step 3. [OPTIONAL] Assign "Exchange Administrator" Role for Enhanced Exchange Online Actions​

info

This allows additional Exchange Online actions like adding a user to a shared mailbox or forwarding emails

To grant the necessary permissions:

Go to Azure Portal​

Navigate to the Azure Portal.

Sign in​

Sign in with your Microsoft Account.

Search for Microsoft Entra ID​

In the Azure Portal, search for "Microsoft Entra ID".

Search for Microsoft Entra ID in Azure Portal

Go to Roles and Administrators​

Navigate to "Roles and Administrators" within Microsoft Entra ID.

Roles and Administrators in Microsoft Entra ID

Search for Exchange Administrator​

In the "Roles and Administrators" section, search for "Exchange Administrator".

Searching for Exchange Administrator role

Add assignments​

Click on "Exchange Administrator" and then click "Add assignments".

Adding assignments to Exchange Administrator role

Add Neo Automations App​

In the "Add assignments" pane, search for and select the "Neo Automations" App.

Adding Neo Automations App to role assignment

Completion​

That's it with permissions. Neo Automations now has the necessary rights for enhanced Exchange Online actions.