Manually Register an App in Azure AD for SharePoint/OneDrive/Teams Migration

EdbMails supports Modern Authentication using OAuth 2.0, which requires an application to be registered in Microsoft Entra ID (formerly Azure Active Directory) to securely access SharePoint, OneDrive, and Microsoft Teams data during migration.

The application must be registered manually in Microsoft Entra Admin Center, with the required API permissions and authentication settings configured before connecting to EdbMails.

To complete the application registration and authentication process, follow the steps outlined in the sections below.

1. Register App in Azure AD

   • Log in to Microsoft Entra Admin Center.
   • Navigate to 'Entra ID' from the left-hand menu, select 'App registrations', and then click '+ New registration'.

     

   • Now, enter the name for the application and select 'Accounts in this organizational directory only (EdbMails only – Single tenant)', and then click the ‘Register’ button.

     

   Configure the application permissions

   • On the application’s ‘Overview’ page, click ‘View API permissions’ to access and manage the app’s permission settings.

     

   • Click the ‘+ Add a permission’ button on the API permissions page.

     

   • Next, in the Request API permissions window, select ‘Microsoft Graph’ from the Microsoft APIs section.

     

   • Then, choose ‘Application permissions’ from the available options.

     

   • Choose the following permissions from the list and click ‘Add permissions’ to apply them.
     • Channel.ReadBasic.All
     • ChannelMember.Read.All
     • ChannelMessage.Read.All
     • ChannelSettings.Read.All
     • Chat.Create
     • Chat.ManageDeletion.All
     • Chat.Read.All
     • ChatMember.Read.All
     • ChatMessage.Read.All
     • Directory.Read.All
     • Files.Read.All
     • Files.ReadWrite.All
     • Group.Read.All
     • GroupMember.Read.All
     • Sites.Create.All
     • Sites.FullControl.All
     • Sites.Read.All
     • Team.ReadBasic.All
     • TeamMember.Read.All
     • Teamwork.Migrate.All
     • User.Read.All
     • User.ReadBasic.All

     

   • Again, click the ‘+ Add a permission’ button.

     

   • Navigate to the ‘APIs my organization uses’ tab, search for ‘Office 365 SharePoint Online’, and select it from the results.

     

   • Then, choose ‘Application permissions’ from the available options.

     

   • Choose the following permissions from the list and click ‘Add permissions’ to apply them.
     • Sites.FullControl.All

     

   • On the API permissions page, click ‘Grant admin consent’.

     

   • Click ‘Yes’ to confirm the admin consent.

     

   • The selected permissions are granted with admin consent

     

   Create a New Client Secret

   Follow the steps below to create a new client secret for the application:

   • Navigate to ‘Certificates & secrets’ and click the ‘Client secrets’ tab.

     

   • Click ‘New client secret’, enter a Description, select the appropriate Expiration period, and click ‘Add’.

     

      Note: The client secret is created with the selected expiration period. Once the client secret expires, you must create and configure a new client secret.

   • Copy the client secret value to the clipboard and save it securely. You will need this value later to configure the EdbMails application.

     

   • Navigate to the 'Overview' section and note the 'Application (Client) ID' and 'Directory (Tenant) ID'. These details need to be then pasted in the EdbMails application later.

     

       Note: Permissions for target SharePoint Server

     Repeat the same procedure described above to register the application in the Microsoft Entra Admin Center for the Target environment. Use the same API permissions as configured for the Source environment.

   Permissions for target SharePoint Server

    Note: Repeat the same steps for the target server except for the permissions. Target Permissions are mentioned below.

   • Navigate to ‘Microsoft Graph’ and choose the permissions
     • Channel.ReadBasic.All
     • ChannelMember.Read.All
     • ChannelMessage.Read.All
     • ChannelSettings.Read.All
     • Chat.Create
     • Chat.ManageDeletion.All
     • Chat.Read.All
     • Chat.ReadWrite.All
     • ChatMember.Read.All
     • ChatMessage.Read.All
     • Directory.Read.All
     • Files.Read.All
     • Files.ReadWrite.All
     • Group.Read.All
     • Group.ReadWrite.All
     • GroupMember.Read.All
     • GroupMember.ReadWrite.All
     • Sites.Create.All
     • Sites.FullControl.All
     • Sites.Read.All
     • Sites.ReadWrite.All
     • Team.ReadBasic.All
     • TeamMember.Read.All
     • TeamMember.ReadWrite.All
     • Teamwork.Migrate.All
     • User.Read.All
     • User.ReadBasic.All
     • User.ReadWrite.All
   • The permissions that need to be selected under ‘Office 365 SharePoint Online’ are:
     • Sites.FullControl.All

     

   • Once the permissions are assigned, grant admin consent. Next, navigate to the ‘Overview’ section, copy the ‘Application (client) ID’ and ‘Directory (tenant) ID’, and use them for the target connection in the EdbMails application.
   • Navigate to ‘Certificates & secrets’, create a new client secret, and copy its value. Then, use the client secret value for the target connection in the EdbMails application.

2. Connect to SharePoint Server in EdbMails

   • Login to the EdbMails application and connect to the source server by entering the Source SharePoint Server URL, Admin Center URL, and Office 365 Global Administrator account email address.

     

   • Enter the Application (Client) ID, Directory (Tenant) ID, and Client Secret that you copied from the Microsoft Entra admin center.
   • Click the ‘Login’ button to continue.

     

---

Additional resources:

• SharePoint Migration Guide
• OneDrive Migration Guide
• Microsoft Teams Migration Guide
• Microsoft Teams Channel Migration Guide
• Microsoft Teams Chat Migration Guide