Veritas Alta™ View Compliance and Governance User Guide
- Getting started
- Archive Overview
- Working with Dashboard
- Managing Configurations
- About Provisioning
- About Managed Tags
- About Account Management
- Managing Archive Collectors
- About Exchange Online Archiving
- About Bloomberg Archiving
- About Microsoft Teams Archiving
- About OneDrive for Business Archiving
- About Data Uploading
- About Alta Capture Services Archiving
- Managing Roles and Permissions
- Managing Policies
- Managing Authentication
- Managing Retention Policies
- Managing Email Continuity Services
- Managing Reports and Notifications
- Classification
- Managing Data Import
- AD FS Configuration Guide
- Alta Personal Archive Deployment for IBM Notes
- Archive Administration Updates in Previous Releases
Configuring Exchange Online folder synchronization
After specifying the required credentials, provisioning and configuring exchange online, you can schedule the Exchange Online folder synchronization.
Like Exchange Online Sync, the Exchange Online folder synchronization process uses modern authentication to use Graph APIs for fetching the folders related data from Exchange Online. To use modern authentication, you need to create and register an application Azure Active Directory for the tenant/domain in which the user accounts are available.
To understand the procedure to create an app in Azure Active Directory and assign Graph API permissions, See Setting up modern authentication in Azure AD for Exchange Online sync. You can use the same app that is used for Exchange Online Sync with the additional permission. The Mail.ReadBasic.All permission needs to be an Application type permission and not a Delegated permission. Else, you can have a completely separate app for Exchange Online Folder Synchronization.
To configure Exchange Online folder synchronization
- In the left navigation pane, select Archive Collectors.
The Archive collector page appears.
Note:
The Archive Collectors node appears in the left navigation pane, only when either of the following secondary services is selected:
When the Using Microsoft Office 365 check box is selected on the User Management page.
When the Bloomberg Archiving check box is selected on the Customer Details page of the Customer Service tab.
- Click Add collector to view available collector cards.
Note:
At the time of adding the first collector, the Add collector button appears in the middle of the screen. If one or more collectors are already added, the Add collector option appears on the top right-hand corner.
If you select the collector that is not supported in Veritas Alta Archiving, the Configure button gets disabled. You cannot configure such collectors.
- Select the Exchange Online collector for which you want to configure the folder synchronization.
Note:
If Exchange Online archive collector that you want to configure for folder synchronization is not listed, add a new collector. See Adding new archive collectors.
- Click on the Kebab icon (three vertical dots), and click Manage.
- On the Credential Management page, ensure that the O365 Sync check box is selected by default. Select the Folder Sync check box.
- Under Folder Sync, specify the following:
Use same credentials used in O365 Sync
Select this check box to use the same Azure AD application that is configured for O365 sync.
Note:
If you do not select the Use same credentials used in O365 Sync check box, specify other configuration parameters explained in table below.
Client ID
Provide the client ID of the application registered in the Azure Active Directory.
One tenant can have different client IDs and certificates.
Tenant Name
Provide the Tenant or Domain name.
Certificate
Select the Use existing certificate option if you have already created the .PFX certificate for the registered application.
Select the Add new certificate option to browse and select the new certificate.
Thumbprint
Specify the thumbprint which is used to validate the certificate.
Expires On
Specify the date of expiry for the mentioned certificate
- Click Test below the Folder Sync option to test information provided for Folder Sync.
- Click Save to navigate to the Provisioning and configuration tab.
Else, you can manually go to the Provisioning and configuration tab. The application displays the connection confirmation notification and the last successful connection date and time. This notification disappears in a few seconds.
- On the Provisioning page, do the following steps:
Synchronize user name from
Select one of the following options:
Email Address: Select this option to match the Username with the primary email address associated with the archive account.
User Principal Name: Select this option to match the Username with the user principal name associated with the archive account.
Domain Provisioning
Select one of the following options:
Provision specific domains: Select this option to choose the Exchange Online domains for which you want to provision archive accounts. Then click Specify Domains and select the required domains from the list. The Select Domains check box lists all the domains that are associated with the configured Exchange Online account. To set a primary domain, select Set as Primary for the required domain. When you have chosen the domains, click OK to save the options you selected.
Provision all domains: Select this option to provision archive accounts for all the Exchange Online domains that are associated with the configured Exchange Online account.
Archive Provisioning
Select one of the following options:
Provision Distribution Lists: Select this option to create archive accounts for the users that are associated with specific Exchange Online distribution lists for your company. Then click Specify Lists and select the required distribution lists. When you have chosen the distribution lists, click OK to save the options you selected.
Provision Dynamic Distribution Lists: Select this option to create archive accounts for the users that are associated with specific Exchange Online dynamic distribution lists for your company. Then click Specify Lists and select the required dynamic distribution lists. When you have chosen the dynamic distribution lists, click OK to save the options you selected.
Provision all users: Select this option to provision archive accounts for all the users in the domains that you specified in the previous step.
SMTP Journaling
Select whether to provision journaling for Exchange Online Sync manually or automatically:
Manually provision journaling in Exchange Online: Select this option if you want to configure Exchange Online journaling manually from within the Exchange Online interface. If you choose this option, you must configure a suitable journaling rule manually in Exchange Online before you attempt to run a synchronization.
Choose manual provisioning if you want to configure specific journaling rules, for example to journal for a named distribution group. Otherwise you can choose automatic provisioning.
For information on how to configure journaling manually for Exchange Online Sync, see Setting up Exchange Online journaling in the Veritas Alta Archiving Journaling Guide.
Note:
The journal address that you must provide if you configure Exchange Online journaling manually is shown in the Journal address box under the Automatically provision journaling in Exchange Online option.
Automatically provision journaling in Exchange Online: Select this option to let Veritas Alta View Compliance and Governance Management Console configure a journaling rule automatically in Exchange Online. Veritas Alta View Compliance and Governance Management Console attempts to create the journaling rule when you click Next at the end of this procedure. The rule journals all items to the assigned Exchange Online journal address. Veritas Alta View Compliance and Governance Management Console prepopulates the Journal address box with the Exchange Online journal address that Veritas Alta Archiving has assigned to your company.
Note:
You must also set up a send connector for Exchange Online. See Setting up Exchange Online journaling in the Veritas Alta Archiving Journaling Guide.
Personal Archive Deployment Options
Under Web Folder Configuration, specify the following details:
Deploy Web Folder to Exchange Online: Select this check box if you want Exchange Online Sync to deploy a Alta Personal Archive web folder when it provisions an archive account.
Archive Folder Name: Enter the name to use for the Alta Personal Archive web folder, such as Personal Archive.
Archive Folder URL: Enter your access URL for Alta Personal Archive.
Under Personal Archive Access, configure whether Veritas Alta Archiving automatically enables access to Alta Personal Archive and sends a welcome message email to each user.
Enable Personal Archive access and send Welcome Message: Select this option to enable Alta Personal Archive access to each account that is provisioned, and to enable welcome messages to be sent to the provisioned users. If you select this option, you must select one of the sub-options.
Don't send Welcome Message if already sent: Select this option to send a welcome message to a provisioned user only once. This is the default option.
Send Welcome Message anyway: Select this option to send a welcome message every time that Exchange Online Sync synchronizes the account, even if a welcome message was sent previously.
Click the Compose Welcome Message Template link to create a new welcome message notification.
Notification Options
Under Administration Roles to Notify, do the following:
Show Notify Roles: Click this option to select the roles you want to get notified. Expand the role to view number of users available under that role.
Show Custom Roles: Click this option to select the customized roles you have created.
- Click Next to save the provisioning details, and navigate to the Configuration page.
- On the Configuration page, do the following steps:
Synchronize Shared Mailboxes
Select this check box to view the following options:
Synchronize Shared Mailboxes: Select this check box to target every shared mailbox for synchronization in all of your Exchange Online domains.
Keep Personal Archive Login enabled for all Shared Mailboxes: Select this check box to allow users (who are blocked by Microsoft to access Exchange Online) to access their shared mailboxes available on Personal Archive.
Usually, when Microsoft blocks the sign-in status of a user, the Veritas Alta Archiving administrator also blocks that user to access Exchange Online and Personal Archive. After you select this check box, all the shared mailboxes, which are in the scope of synchronization, with a sign-in status as Blocked from Microsoft, remain enabled in Veritas Alta Archiving.
Mailbox Delegate Permissions
Select one of the following options to decide further action.
Do not synchronize delegation permissions: Perform no synchronization of mailbox delegation permissions. If any mailbox delegation permissions are already synchronized, these remain unaffected.
Synchronize delegation permissions: Synchronize the delegation permissions that are applied to the targeted mailboxes. In Alta Personal Archive a user is then able to access the archived content for each mailbox to which they have been granted delegate access.
Remove synchronized delegation permissions: Remove any synchronized Exchange Online delegation permissions. All delegated access to Exchange Online archives is removed.
- Click Next to save the configuration details, and navigate to the Exchange Online Sync Schedular page.
- On the Exchange Online Sync Schedular page, specify the following:
Sync Schedular
Select this option to set up a synchronization schedule. Specify the start date and time for initiating the sync.
Sync Now
Select this option to run the Exchange Online synchronization on demand. Click Run Now for initiating the sync.
- Click Next to navigate to the Summary page.
- On the Summary page, ensure the details. In case, you want to modify anything, click Edit to navigate to corresponding page.
- On the Folder Sync Configuration page, specify the following:
Mailbox Settings
Autoselect new Mailboxes
Select this option to enable folder synchronization for the shared and user mailboxes of a newly added user.
Deselect disabled Mailboxes
Select this option to disable folder synchronization for the mailboxes of the deleted user.
Concurrent Mailboxes
Select the number of user mailboxes to be processed at the same time.
Schedule
Next run at
Scheduled date and time at which folder synchronization will take place.
Repeat
Frequency at which folder synchronization takes place, such as daily, weekly, monthly.
Skip these folders while syncing
Select the folders that need to be skipped while performing folder synchronization.
- Click Save.
- To view your folder synchronization job progress and status, select the Job List tab.
The page displays the last successful run date and time, total number of exchange online accounts available, and number of accounts that are enabled for folder synchronization.
To view Exchange Online Folder Synchronization jobs, select Exchange Online Sync.
To view Folder Sync jobs, select Folder Sync.
To refresh the page details, click the Refresh icon.
If required, click the Export icon to export the job list in the CSV format.