Checklist for the Microsoft Exchange Online integration

  • Release version: Washingtondc
  • Updated February 1, 2024
  • 2 minutes to read

    • Use this checklist to guide you through the end-to-end tasks of the integration. The following checklist includes set up and installation tasks and examples of use cases and expected results for the application.

    Before you begin

    Track your progress with the setup, installation, and configuration of the integration with the following table. Complete all the tasks for a step before moving on to the next step. Each step identifies the roles that are required to perform the tasks and references the numbered topics of the installation and configuration guide for this integration.

    Roles required: Roles are listed for each step in the following table.

    Procedure

    To track your progress for the integration, follow the steps in the table in the order that they are presented
    Table 1. Checklist
    Check box.
    		As Microsoft Office 365 administrator, set up your Microsoft Office 365 account.

    Create an API account that permits access to the Security and Compliance center in Microsoft Office 365.

    Check box.
    		As Microsoft Azure administrator, set up your Microsoft Azure account.

    Create an account that uses an Application ID to gather additional email message details and delete email messages. For steps to set up the account, see Set up your Microsoft Azure account for the ServiceNow Microsoft Exchange Online integration.
    Check box.
    		As ServiceNow AI Platform admin, set up your ServiceNow AI Platform instance for the integration.
    For tasks and more information, see Set up your ServiceNow AI Platform instance for the Microsoft Exchange Online integration.
    1. Assign ServiceNow AI Platform roles.
    2. Install ServiceNow AI Platform (SIR) and Security Operations applications from the ServiceNow Store and activate them on your instance.
    3. Enable the email send and email receive capabilities.
    4. Assign the email read and write role to the sn_si.analyst.
    5. Create an approval group.
    Check box.
    		As ServiceNow AI Platform admin, install the application for the integration from the ServiceNow Store.

    For installation steps, see Install the Microsoft Exchange Online application for the ServiceNow Microsoft Exchange Online integration.
    Check box.
    		As sn_si.admin, complete the configuration settings tabs to establish connectivity and activate the search and delete workflows.

    For connection and configuration settings, see Configure the Microsoft Exchange Online integration with your ServiceNow AI Platform instance.
    Check box.
    		As sn_si.analyst, set up email search criteria and request a search for matching emails on the Microsoft Exchange Online server. For an example, see Define email search criteria and request a search on the Microsoft Exchange Online service.
    1. Locate security incidents related to phishing events.
    2. Set up email search criteria.
    3. Request a search for emails.
    4. Locate search results and message details on the related lists on the security incident.
    Check box.
    		As sn_si.analyst, delete emails from the Microsoft Exchange Online server. For an example, see Request delete approval for emails on Microsoft Exchange online service.
    1. Locate security incident with search results.
    2. Delete emails or request approval to delete emails.
    3. Verify that emails are deleted from results posted to the work notes and related lists on the security incident.
    Check box.
    		As sn_si.admin, or, as a member of an Approval group, process email delete requests via email notifications.

    For an example, see Approve delete email requests for the Microsoft Exchange Online integration.
    You have successfully completed the set up steps and verified expected results for the integration.