How to Create an Application ID and Application Secret for Barracuda Message Archiver in Microsoft 365

When setting up a new Exchange Online source in the Barracuda Message Archiver, you will need an application ID and application secret from Microsoft 365.

Register an Application

1. Log into the Microsoft 365 Admin center as a global admin https://admin.microsoft.com/.

2. In the left-hand menu, select All admin centers > Microsoft Entra.

3. Under Applications > App registrations, select New registration.

   

4. Enter a name for the app. For example, “ArchiverApp”.

5. Under Supported Account Types, select Accounts in this organizational directory only.

6. Click Register.

   

Grant Permissions

Your application ID is now available in the app overview. You must now grant the required permissions.

1. In the left-hand menu, select API permissions.

2. Microsoft Graph is listed by default. It is recommended to remove all permissions and add the necessary permissions. Click the 3 dots to the right and select Remove all permissions.

   

3. Under Configured Permissions, select Add a permission. Under Microsoft Graph > Application permissions, type “Dir” in the search bar. Under Directory, check the Directory.Read.All box.

4. Click Add permissions at the bottom to save.

   

5. Under Configured Permissions, select Add a permission. Under APIs my organization uses, type “Office” in the search bar to find & select Office 365 Exchange Online.

   

6. Under Office 356 Exchange Online, select Application permissions. Under Other Permissions, check the full_access_as_app box.

7. Click Add permissions at the bottom to save.

   

8. Select Grant admin consent for.

   

Generate Application Secret

After granting the necessary permissions, you can now generate the application secret.

1. In the left-hand menu, select Certificates & secrets. Select New client secret.

2. Add a description and an expiration date. Barracuda Networks recommends using 730 days (24 months).

   

3. Once your client secret is created, copy down the Value as it may not be displayed again. Note that this is not the Secret ID.

   

4. On the left-hand menu, select Overview and copy down the Application (client) ID.

   

The Value and Application (client) ID you copied down can now be used to authorize the Barracuda Message Archiver permissions to import data from Exchange Online.