Managing Exchange Online

If your Office subscription includes Exchange Online, you can configure EmpowerID to inventory and enforce permissions for your Exchange organization. If you are using Exchange Online, EmpowerID automatically discovers it when connecting to Office 365, categorizes it as a resource system, and creates a record within the ExchangeMailbox table of the EmpowerID Identity Warehouse for each mailbox discovered during inventory. To work with Exchange Online after the initial inventory requires that you enable the Office 365 Batch Processor job on at least one EmpowerID server hosting the EmpowerID Worker Role service. Additionally, if you want EmpowerID to inventory and enforce permissions for Exchange Online, you must enable that feature in EmpowerID. This topic demonstrates how to enable the Office 365 Batch Processor job as well as permissions inventory and enforcement.

To configure EmpowerID to manage Exchange Online

  1. Log in to the EmpowerID Management Console as an administrative user.
  2. Open Configuration Manager by clicking the application icon and selecting Configuration Manager from the context menu.
  3. From Configuration Manager, click the EmpowerID Servers and Roles node, scroll to the EOffice 365 Batch Processor job in the Configuration Manager grid, and tick the job so that it is enabled on at least one EmpowerID server. This job must be enabled for EmpowerID to batch process Office 365 Exchange Online actions.
  4. Optionally, if you want EmpowerID to inventory and enforce the permissions—known as Rights in EmpowerID—click the Resource Systems node in the application navigation tree on the left of the screen. You should see an Exchange resource system named after your Office 365 account store. For example, if you named your Office 365 account store Office 365, the name of the Exchange resource system would be Office 365 Exchange.
  5. Double-click the Office 365 Exchange resource system, or right-click it and select Edit from the context menu to open the Office 365 Exchange configuration screen.
  6. From the Office 365 Exchange configuration screen, scroll to the Rights Inventory pane and toggle the red sphere to a green check box beside Enable this Functionality.
  7. Toggle the red sphere to a green check box beside each Exchange Online permissions you want EmpowerID to inventory.
  8. In the Rights Enforcement pane, toggle Enable this Functionality from a red sphere to a green check box.
  9. During inventory, if Rights Inventory is enabled, EmpowerID flags the ExchangeMailbox table to get the permissions by setting a value in the ConfigurationXml column for each mailbox. During the next run of the Rights Inventory job, EmpowerID pulls all mailboxes flagged by the ConfigurationXml column and pulls permissions from Exchange Online.