Provisioning an Exchange Online (Inline Mode) Authorized Account

The Provision Service Account for Exchange Online (Inline Mode) screen appears.

1. Click Click here at the end of Step 1.
2. On the Microsoft logon screen that appears, specify your Office 365 Global Administrator credentials and click Sign in.
3. On the Exchange Online authorization screen that appears, click Accept to grant Cloud App Security the permission.

   During this process, Cloud App Security creates the Trend Micro Cloud App Security app on Exchange Online.

1. Go back to the Cloud App Security management console and copy the app ID shown in Step 2.
2. Log on to the Azure Active Directory portal as an Exchange Online administrator.
3. In the left-side area, click Azure Active Directory, and select Roles and administrators under Manage.
4. In the list on the Roles and administrators screen, click Exchange administrator.
5. On the Exchange administrator | Assignments screen, click +Add assignments.
6. Assign the Exchange administrator role to the Trend Micro Cloud App Security app

• If you have not enabled Privileged Identity Management:

  1. In the search box on the Add assignments screen, paste the app ID copied earlier and press Enter.

  2. Locate and select the app Trend Micro Cloud App Security, and then click Add.

     The app appears on the Exchange administrator | Assignments screen.

• If you have enabled Privileged Identity Management:

  1. On the Add assignments screen, click No member selected.

  2. On the Select a member screen, paste the app ID copied earlier, and press Enter.

  3. Locate and select the app Trend Micro Cloud App Security, and then click Select.

  4. On the Setting tab, retain the default settings, provide a justification for assigning the role under Enter justification, and click Assign.

     The app appears on the Active assignments tab of the Exchange administrator | Assignments screen.

1. Go back to the Cloud App Security management console and click Click here after Step 3.
2. On the Microsoft logon screen that appears, specify your Office 365 Global Administrator credentials and click Sign in.
3. On the Exchange Online authorization screen that appears, click Accept to grant Cloud App Security the permission to sync user and domain data from Azure AD.

If the message "Exchange Online protected in inline mode." appears on the Notifications screen, the provisioning is successful.

The provisioning automatically creates transport rules, connectors, and Microsoft 365 groups on Exchange Online to implement mail flow for both inbound protection and outbound protection. For details, see Connectors, Transport Rules, and Group for Inline Protection.