How to add the Exchange.ManageAsApp API autorisation

Lucien | MasterIT 20

Hi,

I'd like to connect from a pwsh cli to ExchangeOnline using the Connect-ExchangeOnline command.

For now, the command :

Connect-ExchangeOnline -AppId "xxxxxxx-xx-xx" -CertificateFilePath "/theFile.pfx" -CertificatePassword (ConvertTo-SecureString "thePass" -AsPlainText -Force) -Organization "theTenant.onmicrosoft.com"

returns OperationStopped: UnAuthorized

After some searches, it seems I need the Exchange.ManageAsApp API scope permission but I can't find it in Entra ID lists in Authorized API.

By the way : the command Connect-ExchangeOnline -Device works like a charm but need interaction and I try to automate Distribution Group creation (and the Graph API can't do that).

Thanks for your help.

0 comments

Answer accepted by question author

Austin-H 8,370 Microsoft External Staff Moderator

Hello Lucien | MasterIT
Thank you for posting question to Microsoft Q&A Forum.

Please check on this article: https://learn.microsoft.com/en-us/services-hub/microsoft-engage-center/health/pdfs/getting-started-office365exchange/app-auth
On my environment I could find Exchange.ManageAsApp like this screenshot:
User's image

Please let me know if you could find this option from your end.

I am looking forward to your reply.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

0 comments

1 additional answer

Lucien | MasterIT 20 Reputation points

2025-11-29T17:04:05.91+00:00
Thanks @Austin-H , Fast and Good !

I'm a bit ashamed, I search with "Exchange" in the search bar and it returns nothing.

Works for me. New error though :
```
OperationStopped: The role assigned to application xxxxxxxxxxxxx-xxxxxxxxxxx-xxxx isn't supported in this scenario. Please check online documentation for assigning correct Directory Roles to
Azure AD Application for EXO App-Only Authentication.
```
Any ideas ?

(I mark the thread as resolved)

Thanks again
Was this answer helpful?
Austin-H 8,370 Reputation points Microsoft External Staff Moderator

2025-11-29T17:15:24.5333333+00:00

Hi Lucien | MasterIT
Thank you for your quick response. I'm glad that I could help you.
I was checking on role section in this: https://learn.microsoft.com/en-us/powershell/exchange/app-only-auth-powershell-v2?view=exchange-ps#assign-microsoft-entra-roles-to-the-application
As for now, I do not know if you are having the role as Global Administrator from your end. But you could also take this thread as reference: https://learn.microsoft.com/en-us/answers/questions/2283099/connect-exchangeonline-managedidentity-organizatio
My suggestion would be trying to assign the role Exchange Administrator to see how it goes.

Lucien | MasterIT 20 Reputation points

2025-11-30T10:52:25.03+00:00

Thanks again, I'll see if I manage to solve this issue and post a solution here

EDIT ---

It's working !!! I add MyApplication in Roles & Admin > Exchange Administrator > Add assignments (Needed to search from the search bar the application name 'cause it's not displayed by default...) The search bar ... again

Thanks for your help. You help me a lot !!!

Lucien
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Your answer