The Service Principal in Exchange Online is the identity for the application in Microsoft Entra ID (Azure Active Directory) that allows it to access Exchange Online resources like mailboxes with specific permissions through Role-Based Access Control (RBAC). The values you use in the commands in this procedure are from the mail-enabled security group that you created. See Create a mail-enabled security group.

NOTE: Before performing this procedure, make sure you have installed Microsoft Azure Resources.

  1. Before beginning, you'll need the DisplayName and AppID (both from the App registrations page for your app), and the ObjectID, located on the Enterprise applications page, in the row for the app, or by running the following PowerShell command: Get-AzADServicePrincipal -ApplicationId <String> .

  2. With the values from Step 1, run the following PowerShell command to create a service principal for the registered iManage email management app: New-ServicePrincipal -AppID <String> -DisplayName <String> -ObjectID <String>.

The next step is to Create a new management scope.