Issue: What exact permissions does the account used to connect between Microsoft 365 and WithSecure require? Resolution: The following permissions are required for the account which connects between Microsoft 365 and WithSecure:Exchange: Read all users' full profilesRead all audit log dataRead all usage reportsRead and write mail in all mailboxesRead and write contacts in all mailboxesRead and write calendars in all mailboxesRead domainsRead activity data for you organizationRead service health information of you organizationUse Exchange Web Services with full access to all mailboxesSign in and read user profileRead directory dataSharepoint and Teams: Sign in and read user profileSend channel messagesSend user chat messagesRead all groupsRead domainsCreate, edit, and delete items and lists in all site collectionsRead and write items and lists in all site collectionsHave full control of all site collectionsOneDrive: Read and write items and lists in all site collectionsHave full control of all site collectionsSign in and read user profileRead and write files in all site collectionsRead all users' full profilesRead domains Important note: Some of the above mentioned permissions sounds like a lot, but we are using the minimum permissions needed in order for our solution to operate correctly.For example: in Sharepoint and Teams; the last one is "Have full control of all site collections"This permission is only used by us to create the quarantine zone of which we send the files to.WithSecure does not do anything else with this permission, but since this is the minimum one required, we have to request it.