Registering Azure AD Application for Active Backup for Microsoft 365

Created by Liam Ralph, Modified on Thu, 10 Jul at 2:26 PM by Liam Ralph

For version 2.4 or above

  1. Open Active Backup for Microsoft 365

  2. Go to Task List → Create

  3. Select Create a backup task

  4. Set endpoint type to Microsoft 365

  5. Enter a strong certificate password

  6. Sign in as a Microsoft 365 Global Admin and accept the permissions

  7. Download and store the certificate securely

  8. Complete the wizard setup
    ? App credentials can be found under:
    Task List → Edit → App Credentials


For version 2.2 & 2.3 (Manual Registration)

Requirements

  • Windows 10 or Windows Server 2016+

  • PowerShell (admin mode)


PowerShell Setup

  1. Run PowerShell as Administrator

  2. Change execution policy:

    powershell
    Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope Process

Download & Run Script

  1. Download: AppGenerator.ps1 (from Synology)

  2. Navigate to script folder:

    powershell
    cd C:\Users\yourname\Downloads
  3. Run script:

    powershell
    .\AppGenerator.ps1
  4. Respond with R to run

    • Accept NuGet install if prompted (Y)

  5. When prompted:

    • Enter a strong certificate password

    • Sign in as Global Admin

  6. After completion:

    • Copy & save:

      • Tenant ID

      • Application ID

      • Certificate file path

      • Certificate password


Authorize the Application (Azure Portal)

  1. Open the URL shown in PowerShell

  2. Review API permissions and confirm the following are enabled:

Microsoft Graph – Application Permissions

  • Calendars.ReadWrite

  • Channel.Create

  • Channel.ReadBasic.All

  • ChannelMember.ReadWrite.All

  • ChannelMessage.Read.All

  • ChannelSettings.ReadWrite.All

  • Contacts.ReadWrite

  • Directory.ReadWrite.All

  • Files.ReadWrite.All

  • Group.ReadWrite.All

  • Mail.ReadWrite

  • Sites.FullControl.All

  • Team.Create

  • Team.ReadBasic.All

  • TeamMember.ReadWrite.All

  • TeamSettings.ReadWrite.All

  • TeamsTab.Create

  • TeamsTab.ReadWrite.All

  • User.ReadWrite.All

Exchange Online:

  • full_access_as_app

SharePoint:

  • Sites.FullControl.All

Click: Grant admin consent for [Your Org] → Yes


Create a Backup Task in AB4M365

  1. Launch Active Backup for Microsoft 365

  2. Go to Task List → Create

  3. Select Create a new backup task

  4. Enter the following details:

FieldValue (from previous steps)
EndpointMicrosoft 365
Domain Admin EmailGlobal Admin used during registration
Tenant IDFrom PowerShell output
Application IDFrom PowerShell output
Certificate FilePath from PowerShell
Certificate PasswordPassword you created during script execution
  1. Complete wizard to configure backup

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article