AvePoint Docs
Graph API
My support tickets
Graph API
My support tickets
English

    Home > Microsoft > Configure App Profiles or Service Account Profiles > How to Assign the Exchange Administrator Role to an App? > Overview

    Export to PDF

    How to Assign the Exchange Administrator Role to an App?

    If you create app profiles for the following apps and you want to manage Exchange mailboxes and settings / Security and distribution group objects / Microsoft 365 Defender settings, you need to go to the Microsoft Entra admin center (or Microsoft Azure portal) to assign the Exchange Administrator role to the apps.

    App profile type (in AOS)App profile type (in AOS)App name (in Microsoft Entra ID)
    Classic modeMicrosoft 365 (All permissions)AvePoint Online Services Administration for Microsoft365
    Modern modeCloud Backup for Microsoft 365 (All permissions)AvePoint Cloud Backup for Microsoft365 (All Permissions)
    Modern modeCloud Backup for Microsoft 365 (Exchange permissions)AvePoint Cloud Backup for Microsoft365 (Exchange Permissions)
    Modern modeEnPower for Microsoft 365AvePoint EnPower for Microsoft365
    Modern modeEnPower for Teams CallingAvePoint EnPower Teams Calling
    Modern modePolicies for Microsoft 365AvePoint Policies for Microsoft365
    Modern modeCloud Governance for ExchangeAvePoint Cloud Governance Exchange App
    Modern modeFlyAvePoint Fly
    Modern modeOpusAvePoint Opus
    Modern modeCloud Management Services for Microsoft 365*Note: This app requires the Exchange Administrator role only when your organization uses the Classic DocAve Backup service or uses the Cloud Archiving service together with the AvePoint Opus service for Exchange management.AvePoint Cloud Management Service for Microsoft365
    Custom modeCustom Azure apps of the following services: Cloud Backup for Microsoft 365, Cloud Management, Cloud Governance, Fly, EnPower, Opus, and Policies for Microsoft 365[custom app name]You can also get its application ID in the app profile detail page.

    Note the following:

    - To use Cloud Backup for Microsoft 365, EnPower, or Policies for Microsoft 365, the **Exchange Administrator** role must be assigned to the related app. - To use Cloud Governance, if you do not want to assign the **Exchange Administrator** role to the related app, you can also assign custom Exchange Online role groups to the app. For details on assigning custom Exchange Online role groups, refer to the [Assign Custom Exchange Online Role Groups to the Application](#missing-link) section. - To use Fly, if you do not want to assign the **Exchange Administrator** role to this app, you can also assign custom roles to the app. For more information, refer to the . - To use Cloud Management or Opus, if you do not want to assign the **Exchange Administrator** role to this app, you can also assign other supported Microsoft Entra roles to the app. For more information, refer to this Microsoft article: .

    To assign the Exchange Administrator role to the app, refer to the following steps:

    1. Log in to the Microsoft Entra admin center (or Microsoft Azure portal), and go to Microsoft Entra ID.

    2. Click Roles & admins (or Roles and administrators) in the left pane.

    3. On the Roles and administrators page, search the Exchange Administrator role, and then click Exchange Administrator.

      Clicking the Exchange Administrator role.

    4. On the Assignments page that opens, click Add assignments.

    5. On the Add assignments page, click the button to select a member.

      Clicking the button to select a member.

    6. You can enter an app name (or application ID) in the search box to search for the app to which you want to assign the role.

      *Note: The Application ID information is displayed on the App profile details page in AvePoint Online Services > Management > App management.

      Searching for an AvePoint app.

    7. Select the app and click Select to assign the role. Note that the assigned role will take effect in about 30 minutes.