The Service Account setting allows Intelligence360 Admins to maintain a single connection to Office365 to sync emails and to manage service account users. Maintaining a single connection prevents the annoyance of per user re-connects and pauses in data capture. If an organization requires regular password resets, maintaining one connection will prevent each individual user from having to reconnect after each mandatory password change.

🔐 Use Service Account is available to Admin only. 🔐

What permissions does the Office365 admin need to connect via service account?

They need to be an Azure admin of their Microsoft team and have access to their team's Microsoft Azure admin portal. (Microsoft Azure Global Admin)

Setting Up Service Account for Office 365

1. Identify the Microsoft Azure Global Admin email address for your organization’s Microsoft 365 account (this is typically a system administrator email or head of IT’s email address).

    

2. Log in to the administrator’s Azure portal at https://portal.azure.com/ and navigate to “Home > Enterprise applications > User Settings” under: https://portal.azure.com/#blade/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/AllApps/menuId/UserSettings

    

   

    

3. Under admin consent requests, select “Yes” and add Intelligence360 admin users who can provide Azure admin consent (typically the Global Administrator). This user will need to be the Primary user in the Intelligence360 Office 365 integration*. Save changes.

    

   *Note: To determine if a user is listed as "Primary" in the Office365 integration, look at the list of users in the next step under User Management, "Primary" will be listed next to a Primary user. If the user is not primary, click the three dots next to their name and select "Set as Primary User".

    

4. Navigate to Intelligence360. Click on Settings in the left nav, select All Integrations, open the Office 365 Integration and navigate to the User Management tab. If the Microsoft Azure Global Admin’s email address is not already added on your User Management page within Intelligence360, add that user and set them up as an Intelligence360 Admin and as the Primary User. To set someone as primary, click the three dots next to a user in the list and select "Set as Primary User".

    

   Set as Primary User:

   

    

   Listed as Primary User:

   

    

5. Have that user accept their email invitation to log in to Intelligence360, then have that individual complete the steps below.

    

6. Under User Management, take note of any existing user connections that are disabled. Once switched to a service account those should go away.

    

7. Intelligence360 Admin with Azure permissions should open the Office 365 integration from applications, navigate to Connection Settings and click on "Use Service Account". Save changes.

    

   ---

   Optional: You can enable "Read Only Permissions" to enable read only access.

   

   ---

    

   

    

8. Under "My Connection" the Intelligence360 admin with Azure permissions should set up their connection. If a connection already exists, delete and reactivate the connection.

1. You should get redirected to a URL that looks like this: https://login.microsoftonline.com/organizations/v2.0/adminconsent that prompts the user for admin consent.

    

   

    

   Note: Only the admin of the organization's Microsoft account is authorized to accept this. Otherwise, you’ll see a message like this:

    

   

    

2. You should be redirected back to the app and subsequent syncs of any already connected users should go through the service account flow.

    

3. Navigate to "User Management" and click on " + add/edit" to connect Platform users to the O365 integration.

    

4. Using the dropdown, select the emails of the Platform users you wish to include and toggle the left button to connect and sync their emails.

    

   

    

5. Optional: If you want to add a different email for a user, go to “Team Profile > User Management” and click on the user. Under "Email Aliases'', add the email you want to sync (find more instructions on Email Aliases here). Once an alias is created, you can select this email in the connected email dropdown.

    

6. Click Save.

    

7. If you are setting up the integration for the first time, you're good to go! If you are switching to the service account (previously used this integration without service account enabled), click here for next steps.

    

Troubleshooting

Insufficient Privileges/Authorization Identity Not Found

If you see the following errors:

• Insufficient privileges to complete the operation

• Authorization identity not found

Complete the following steps:

1. Login to the Microsoft Azure Global Admin's Azure portal at https://portal.azure.com/

2. Navigate to “Enterprise applications”, https://portal.azure.com/#blade/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/AllApps

3. Here, you should see the Intelligence360 application; click on the application and navigate to “Permissions” from the left navigation menu and click “Grant Admin Consent”.

4. Accept the permissions and navigate back to our Platform.

5. If there’s still a connection for the Microsoft Azure Global Admin in Intelligence360 (the primary user) delete it and click “Activate” to set up the connection again. Make sure to use the same email with which admin access was granted in the Azure portal.

6. You should get redirected back to the Platform with a working connection. If you still see an “Insufficient privileges” error, wait 30 seconds and refresh the page.

Unable to Find a User Matching [email]

If you see an error “Unable to find a user matching email@company.com”, this indicates that the user does not have their Outlook account set up correctly.

If you run into any issues, please contact support.