Chat now with support
Chat with Support

Identity Manager 8.0 - Administration Guide for Connecting to Exchange Online

Managing Exchange Online Environments Setting up Exchange Online Synchronization Base Data for Managing Exchange Online Appendix: Configuration Parameters for Managing Exchange Online Appendix: Default Project Template for Exchange Online Appendix: Editing System Objects

Managing Exchange Online Environments

Managing Exchange Online Environments

The key aspects of administrating an Exchange Online system with One Identity Manager are local mapping of mailboxes, e-mail users, e-mail contacts, mail-enabled distribution groups and Office 365 groups from a cloud environment.

The system information for the Exchange Online structure is loaded into the One Identity Manager database during data synchronization. It is only possible to customize certain system information in the One Identity Manager due to the complex dependencies and far reaching effects of changes.

For more detailed information about the Exchange Online structure, see the Exchange Online documentation from Microsoft.

Related Topics

Architecture Overview

To access Exchange Online organizational data, the Exchange Online connector is installed on a synchronization server. The synchronization server ensures data is compared between the One Identity Manager database and Exchange Online. The Exchange Online connector is part of the Exchange Online Module and responsible for communicating with the Microsoft Office 365 subscriptions of Exchange Online in the cloud. Windows PowerShell is used to access the Exchange Online data.

To access the data in an Exchange Online organization, the Azure Active Directory target system containing the organization must be synchronized.

Figure 1: Architecture for synchronization

One Identity Manager Users for Managing an Exchange Online System

One Identity Manager Users for Managing an Exchange Online System

The following users are used for setting up and administration of an Exchange Online system.

Table 1: User
User Task
Target system administrators

Target system administrators must be assigned to the application role Target system | Administrators.

Users with this application role:

  • Administrate application roles for individual target systems types.
  • Specify the target system manager.
  • Set up other application roles for target system managers if required.
  • Specify which application roles are conflicting for target system managers
  • Authorize other employee to be target system administrators.
  • Do not assume any administrative tasks within the target system.
Target system managers

Target system managers must be assigned to the application role Target systems | Exchange Online or a sub application role.

Users with this application role:

  • Assume administrative tasks for the target system.
  • Create, change or delete target system objects, like user accounts or groups.
  • Edit password policies for the target system.
  • Prepare groups for adding to the IT Shop.
  • Configure synchronization in the Synchronization EditorClosed and defines the mapping for comparing target systems and One Identity Manager.
  • Edit the synchronization's target system types and outstanding objects.
  • Authorize other employees within their area of responsibility as target system managers and create child application roles if required.
One Identity Manager administrators
  • Create customized permissions groups for application roles for role-based login to administration tools in the Designer, as required.
  • Create system users and permissions groups for non-role based login to administration tools, as required.
  • Enable or disable additional configuration parameters in the Designer, as required.
  • Create custom processes in the Designer, as required.
  • Create and configures schedules, as required.
  • Create and configure password policies, as required.

Setting up Exchange Online Synchronization

Setting up Exchange Online Synchronization

One Identity Manager supports synchronization with Exchange Online.

One Identity Manager is responsible for synchronizing data between the Exchange Online database and the One Identity Manager Service. SynchronizationClosed prerequisites are:

  • Synchronization of the Azure Active Directory system is carried out regularly.
  • The Azure Active Directory tenant is declared in One Identity Manager.

To load Exchange Online objects into the One Identity Manager database

  1. Prepare a user account in the Azure Active Directory tenant with sufficient permissions for synchronization.
  2. One Identity Manager parts for managing Exchange Online systems are available if the configuration parameter "TargetSystem\AzureAD\ExchangeOnline" is set.

    • Check whether the configuration parameter is set in the Designer. Otherwise, set the configuration parameter and compile the database.

    • Other configuration parameters are installed when the module is installed. Check the configuration parameters and modify them as necessary to suit your requirements.
  3. Install and configure a synchronization server and declare the server as Job serverClosed in One Identity Manager.
  4. Create a synchronization project with the Synchronization EditorClosed.
Detailed information about this topic
Self Service Tools
Knowledge Base
Notifications & Alerts
Product Support
Software Downloads
Technical Documentation
User Forums
Video Tutorials
RSS Feed
Contact Us
Licensing Assistance
Technical Support
View All
Related Documents