Summary

This article provides a summary of Azure App Configuration for Tenant Management in MachPanel.

Applies To

This article applies to MachPanel build version 7.0.41 and above.

Note

Please follow below article first, If you have not reviewed it yet.

https://kb.machsol.com/Knowledgebase/54511/CSP-Module-Configuration-Guide-for-MachPanel-Automation-Solution

Steps Procedure

•  You will be asked to fill following details while adding profile which can be captured using below section "Azure App Configuration": 

AZURE APP CONFIGURATION

• Login to  "https://portal.azure.com", Navigate to "App Services" > "Manage Microsoft Entra ID", click "App Registrations" >> "New Registration"

​​

• Create / Register an Application (Azure App).
  
  In Redirect URL give your MachPanel's URL eg. https://cp.yourdomain.com and after that append '/PCC/System/O365Callback.aspx'

       It will give you following information to use in MachPanel:

Take a Note of Application (Client) ID, need to be filled in MachPanel Configuration Page.

• Generate Self Signed Certificate and Upload to Azure App.
  • Create Self signed Certificate
  • Run downloaded script as below in shell window.  
  • .\Create-SelfSignedCertificate.ps1 -CommonName "Cert-Name" -StartDate ((Get-Date).AddDays(-1)) -EndDate ((Get-Date).AddDays(-1).AddYears(3)) -Password (ConvertTo-SecureString -String "P@ssw0rd123#" -AsPlainText -Force)
  1. Mention your own Cert-Name
  2. Mention your own password
  3. Mention duration in number of years

• Upload Certificate to Newly Registered Azure App​

​      

• Install/Configure Certificate on Powershell Host Machine (MachPanel Control Server) in both “My user account” & “Computer account”

Take a Note of Thumbprint, need to be filled in MachPanel Configuration Page.

• Generate Client Secrets.

Take a Note of Value, need to be filled in MachPanel Configuration Page.

• Assign Global Administrator and Exchange Administrator Roles to the App.
  • Go to Account Overview page >> Manage > Roles and administrators
  • Double click "Exchange Administrator" and then click "Add assignments".
  • Search and Select your Application and hit Add Button.
  • Repeat steps for "Global Administrator".
    

​

• Assign API Permissions.
  • Click on your desired Application, and click the option "Manifest"
  • Locate "requiredResourceAccess" and replace as explained in attached "API Permissions.txt".

• Grant Admin Consent as shown