Setting up the Graph API

The Microsoft Graph API is a RESTful web API that can be used to access Microsoft cloud services.

To do this, an Azure application must be registered in order to obtain an authentication token for a user or service that can be used to send requests to the Microsoft Graph API.

In deskONE, the Microsoft Graph API can currently be used for the following purposes:

• Synchronization of room and equipment mailboxes

An Azure app with specific configuration and corresponding authorizations is required for the above scenario.

1. Register application

First enter a name for the registration. Please select the second item "Accounts in any organization directory (Any Microsoft Entra ID tenenat - Multitenant)".

2. App registration

Note down the application ID (client). Note down the directory ID (tenant).

3. Certificates & secrets

Create a new secret client key here.

Please note: after the key expires, it will need to be updated in deskONE. In this example, a new client secret must be stored after 180 day.

4. Certificates & secrets

Now save the VALUE of the key - not the ID! This is only visible now and can be copied.

5. API authorizations

• Now assign the following API authorizations:
• User.Read (default, do not(!) delete)
• User.Read.All (type application)
• Calendars.ReadWrite (type application)
• Place.Read.All (type application)
• MailboxSettings.Read.All (type application) (only for equipment mail box)

These authorizations require administrator consent.

6. deskONE

Store the generated values:

• Tenant ID (tenant)
• Client ID (client)
• Client Secret key