Automatically Provisioning Delegate Accounts

Automatically provisioning Delegate Accounts does the following:

  • Creates new Delegate Accounts based on selected Microsoft Office 365 services

  • Configures required roles and other settings for the new Delegate Accounts

Automatically provisioning Delegate Accounts eliminates the need to:

  • Manually create and configure Office 365 user accounts

  • Manually assign Exchange Online roles

  • Manually add SharePoint Online site collections

  • Manually assign SharePoint Online and OneDrive for Business site collections administrators, one by one

The following images show the user interfaces to automatically configure required Delegate Accounts.

Figure 1. Automatically Configure Exchange Online Delegate Account Tab
Figure 2. Automatically Configure SharePoint Online Delegate Account Tab
  1. Add a Delegate Account.
    • Use the pop-up wizard that appears at sign in.

    • On the Dashboard screen, hover over Exchange Online, SharePoint Online, or OneDrive for Business that you want to protect and click Provision in the tooltip that appears.

    • Go to Administration > Service Account. Click Add and select Exchange Online or SharePoint Online.

    The Automatically tab appears by default.

  2. Specify the Global Administrator credentials (email address and password) and click Verify.
    Important:

    Trend Micro does not save the Global Administrator credentials. They are used only once to create the necessary Delegate Accounts.

  3. (For the SharePoint Online Delegate Account) On the Accessing Microsoft SharePoint Online Account Information screen, select the Promote all Delegate Accounts to the Global Administrator admin role check box.
    Note:

    Selecting this check box promotes Delegate Accounts to Global Administrator privileges. This automatically synchronizes changes.

    Clearing this check box leaves Delegate Accounts with Service Administrator privileges. This requires Global Administrator credentials every time you want to synchronize changes.

  4. Select the Microsoft services to protect, for example, Exchange Online or OneDrive for Business.
  5. Optional: Click Submit.
  6. Hover over the ring icon in the upper-right corner of the management console.

    If the message "Exchange Online protected." or "SharePoint Online protected." or "OneDrive for Business protected." appears on the Notifications screen, the corresponding provisioning is successful.