G DATA Mail Protection

Configure permissions in Microsoft Exchange Online

G DATA Mail Protection does more than check incoming emails. It also scans your mailboxes at regular intervals to detect infected emails missed during initial detection and move them to quarantine.

If desired, you can also manage the Microsoft Exchange Online quarantine together with our quarantine area in a single, clearly organized interface.

This article describes how to grant the necessary permissions:

1.	Open your Entra portal and sign in.
2.	Select Applications and App registrations. Open All applications. Show screenshot
3.	Click the G DATA Mail Protection row.
4.	Click API permissions. Show screenshot
5.	Select + Add a permission and then Microsoft Graph. Show screenshot
6.	Select Application permissions. Show screenshot
7.	Scroll down and find the permissions shown in the following screenshot. Select the corresponding permission checkboxes.
8.	Click `Add permissions`.
9.	If present, delete the delegated Microsoft permission User.Read using the three-dot menu in the row. Show screenshot
10.	Click + Add a permission and then APIs my organization uses. Filter by the word Office and select Office 365 Exchange Online. Show screenshot
11.	Click Application permissions and select the Exchange.ManageAsApp permission checkbox. Show screenshot
12.	Click `Add permissions`.
13.	Verify that the permissions match the screenshot below and grant admin consent.
14.	If you have not already done so, upload a certificate for secure access by G DATA Mail Protection.
15.	Select Roles and administrators and click the Exchange Administrator role row. Show screenshot
16.	Click Add assignments. Show screenshot
17.	A new pane opens on the right side of the screen, listing your active users. Enter the search term G DATA in the search bar above the user list. G DATA Mail Protection appears as a suggestion. Select this row and click `Add`. Show screenshot
18.	The Exchange Administrator role is now assigned to G DATA Mail Protection. Show screenshot