Page tree

Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.


  1. Open the Azure Portal by going to
  2. Sign in to Microsoft Azure with your Microsoft 365 account credentials.
  3. Select Azure Active Directory from the Dashboard or from the Portal Menu.

  4. In the left menu, click App registrations.

  5. Click New registration on the App registrations page.

  6. On the Register an application page, enter a name for the application and click Register

    The application has been successfully registered and Tenant ID and Azure Client ID are displayed (Directory (tenant) ID and Application (client) ID respectively).

  7.  Click View API Permissions to add the necessary permissions. 

  8.  Click Microsoft Graph.
  9.  Click on the Application permissions tab.
  10.  Provide the necessary API permissions. Refer to Required API Permissions from Microsoft 365 for details.

    • To skip discovering Exchange Online mailboxes, OneDrives, or SharePoint Online sites in the inventory, disable the API permissions for the corresponding service.
    • If the necessary API permissions for Microsoft Exchange Online/OneDrive for Business/SharePoint Online are not provided, the corresponding service will not be discovered by NAKIVO Backup & Replication.
    • If the necessary API permissions for Microsoft Exchange Online contact and calendar items are not provided, the items will not be supported for backup and recovery operations.
    • To recover messages and contacts containing a lot of content, you also need to enable full_access_as_app for Office 365 Exchange Online in APIs my organization uses.

  11.  Click Update Permissions.

  12. Click Certificates & secrets>New client secret to create a new client secret for your app.

  13. Enter a description for the client secret, select the expiration period, and click Add.