I’m really excited about the fact that Microsoft fulfilled the ask for supporting Exchange Web Services (EWS) protocol in ApplicationAccessPolicy as announced here:
Unfortunately Microsoft seems to make it harder for you to add EWS permission full_access_as_app to your app.
When I heard about this, I was curious about and wanted to cross-check whether it was already available in our tenant or not. Sometimes it takes some more time, until a rollout is complete.
But when I tried to add EWS application permissions to one of my apps, I couldn’t find Office 365 Exchange Online permissions at all. Just to make sure it’s not only my tenant, I checked others and also with different browsers.
All tests with same result:
No Office 365 Exchange Online could be found.
How to add Office 365 Exchange Online permissions to your app
But soon I found out how to add these permissions and thought documenting this might save someone’s time. Here the steps:
- in the dialog after you clicked “Add a permission”, choose “APIs my organization uses”
- you will be shown a list with apps. Search for one of the following strings:
- office 365 exchange
- now you should see in the result Office 365 Exchange Online
- pick you permissions (Delegated or Application) and configure your application
I don’t know why the decision was made to remove these permissions from the first tab. Looking at the resource/audience I could recognize one interesting change:
The value changed from outlook.office365.com to ps.outlook.com!
I hope this helps some of you.