Office365

Office365 High-level Workflow

Configuration of an Office365 App - Define the App

Navigate to Azure Active Directory > App registrations.

Click on + New registration.

Type the user-facing display name for the application, and then click the Register button.

Save the Application (client) ID and Directory (tenant) ID. These details will be needed to configure the Votiro Cloud connector.

Select Certificates & secrets and click on + New client secret. Note that the client secret expiry date can be up to 24 months from its creation.

Copy and save the new client secret Value immediately, because this won’t be available anymore after exiting this page. The client secret will be needed to configure the Votiro Cloud connector.

Configuration of an Office365 App - Grant Permissions to the App

Select API permissions.

Verify that:

All the permissions below are defined for Type = Application

Directory.Read.All

Group.Read.All

GroupMember.Read.All

Mail.ReadWrite

Mail.Send

User.Read.All

The permission for User.Read is defined for Type = Delegated.

If any permissions are missing, add them by clicking on Microsoft Graph.

Approve all permissions by clicking on Grant admin consent for<user name>.

Verify that all the permissions were granted.

Connecting the Office365 App to Votiro Cloud

To get to the Office365 page, from the navigation pane on the left, click Cloud Connectors > Office365 Mail.

The Office365 Mail page contains the following fields:

Element	Field	Description
1	Policy Name	Specify a policy for the Office 365 connector to work with. Select the Default Policy policy if you have not created an alternative policy to use.
2	Azure Tenant Id	Specify the Tenant ID, which can be obtained by contacting Votiro Support. To integrate with your Azure tenant, copy and paste the Azure application Directory (tenant) ID that you saved in step 5 above.
3	Client Id	To integrate with your Azure tenant, copy and paste the Azure Application (client) ID that you saved in step 5 above.
4	Client Secret	To integrate with your Azure tenant, copy and paste the Azure Secret Value that you saved in step 7 above.
5	Channel Name	Specify the name of your channel. The channel name appears on the Incidents page as the name of a connector.
6	Monitored Users	The left column will contain all users under the Azure tenant account. To authorize specific users to be able to sanitize files, select the users from the left column and click Add. To deny sanitization authorization to specific users, select the users from the right column and click Remove. To add/remove all/no users, click the All/None buttons in the respective column.
7	Monitored Groups	The left column will contain all groups under the Azure tenant account. To authorize specific groups to be able to sanitize files, select the groups from the left column and click Add. To deny sanitization authorization to specific groups, select the groups from the right column and click Remove. If a group is enabled/disabled for sanitization, all the group users are enabled/disabled even if the group users were not enabled/disabled in the Monitored Users field.

Select a Policy Name from the given options. You can define a new policy from the Policies tab. In the example above, the Policy Name is "Office 365 Policy".

Copy and paste the Azure Tenant Id, Client Id and Client Secret saved in step 5 and step 7 above.

Type a Channel Name. In the example above, the Channel Name is "Office 365".

When finished making changes, click on Save Changes.

Connecting the Office365 App to Votiro Cloud - Add Protected Users and Groups

After setting the above configurations, the users and groups are imported from Microsoft to the Votiro Connector page:

Select the users and groups you want to protect with Votiro, by dragging or adding them to the right column, then click the Save Changes button:

Office 365 Behavior when using the Votiro Office 365 App

When sending email with attachments to the protected users/groups, the attachments will be sent to the Votiro Cloud engine for sanitization.

While the attachments are undergoing sanitization by Votiro Cloud, the recipient’s mailbox attachment will be replaced with an InProcess_<filename> attachment: