Provision an Exchange Online Delegate Account in Microsoft Office 365 to allow Cloud App Security to protect email messages in protected mailboxes. The Delegate Account must have the ApplicationImpersonation Role and Mailbox Search Role assigned to it.
To simplify provisioning, Trend Micro recommends automatically provisioning Delegate Accounts.
The Admin center page appears.
The New user screen appears.
Display name and User name of the delegate account.
Password: Keep the default setting.
Roles: Set to Customized administrator > Service administrator.
Product licenses: Turn on Create user without product license by moving the slider to the right.
The Exchange admin center page appears.
Office 365 updates the organization settings.
The Delegate Account can now be used to log on to Office 365.
After configuring a Delegate Account in Microsoft Office 365, add the account to Cloud App Security.
If the message "Exchange Online protected." appears on the Notifications screen, the provisioning is successful.