Documentation not clear for required permissions of using service principal authentication for EXO workload

[KuotingChiu]

May I suggest to add the required permissions below of using service principal authentication for EXO workload? Likewise, some other workload may have similar issues as Get-M365DSCCompiledPermissionList is more for credential authentication.

Exchange.ManageAsApp plus EXO admin role assigned to the service principal

Reference: https://docs.microsoft.com/en-us/powershell/exchange/app-only-auth-powershell-v2?view=exchange-ps

[NikCharlebois]

@KuotingChiu for the past few releases, we have been including the exchange > requiredRoles property as part of the resources settings. Is this similar to what you had in mind?

[andikrueger]

@KuotingChiu Any updates on this one?

[KuotingChiu]

For the certificate authentication or application secret authentication, the EXO Exchange.ManageAsApp permission is needed in the Azure app registration.

For all authentication method, the proposed Exchange admin roles should be adequate to be assigned to either the user ID or app principal.

[andikrueger]

@ykuijs Could you add this one to your authentication improvement PR?

[andikrueger]

@KuotingChiu Is this still an issue with the latest Version of M365DSC?

[andikrueger]

Closing due to inactivity