O365 (Microsoft) Exchange Connector

Overview

Used for OneTrust Data Discovery, the O365 Exchange connector is able to connect to Microsoft Exchange cloud-based servers and scan for email data and metadata.

Pod Residency

o365-scanner

Connection Method

API

Incremental Scan

Supported

Supported Scan Actions

Scan Type

Description

Catalog

This scan type will retrieve metadata from the list of users, folders (Inbox, Draft, etc.), email body and email attachments.

Catalog & Scan

This scan type can retrieve metadata (user, folder, email and attachment) and content from email body and email attachments.

Credential and System Permissions

OneTrust recommends to adhere to your organization's security and infrastructure policy and include system engineer resources or other qualified subject matter experts to set up credentials on data sources. For specific instructions for how to enable these credentials, refer to your data source's implementation documentation, knowledge base and/or support resources.

This connector requires Basic Authentication with optional API Key and API Secrets.

Permission

Type

User.Read.All

Application

Mail.Read

Application

User.Read

Note:

When your credentials are created, Azure automatically creates this permission. Please leave it and do not delete.

Delegated

Sample Vault JSON

JSON 
{
    "clientId": "clientId",
    "clientSecret": "clientSecret",
    "scopes": “https://graph.microsoft.com/.default”,
    "tenantId": "tenantId"
}

Scan Profile Support

Note:

For additional details on scan profile configuration and management, see Setting Up Scan Profiles.

Limits

  • Minimum File Size (email attachment)

  • Maximum File Size (email attachment)

Include/Exclude Paths

  • User

  • Folder

  • Email Subject

Collected Objects & Fields

Objects

Fields

Accounts

  • Name

Files (Attachments and Messages)

  • Name

  • Content Type

  • Email Subject (Messages)

  • Received Date (Messages)

  • Sent Date (Messages)

  • Email Sender (Messages)

  • ID

  • ReferenceId (Messages)

  • Path

  • SHA 265 Hash

  • Associated Message ID

Folders

  • Name

  • Path