In order for CIR to be able to connect to your Office 365 | Exchange Online accounts, it needs to be given the logon (username and password) of an account within your organization that has the "Global Admin" role. While you may use an existing Global Admin for this, we recommend creating a new "CIRAdmin365" Global Admin account.
To create a new Office 365 administrative account:
-
On your computer’s web browser, go to https://login.microsoftonline.com/ and log with an existing Global Admin account.
- The account that was created when Office 365 was initially purchased should have automatically been made a Global Admin.
- Go to the Admin section.
- In the Office 365 menu, select USERS > Active Users.
- Click the Add a User option on the Active Users dashboard.
- Fill in the dialog with the information provided from your Engagement Lead. Select Automatically create a password & Require this user to change their password when they first sign in. Then click Next.
- Select the Microsoft 265 Business Basic license and click Next.
- (If a license is not available, please continue without it and notify the CIR engagement lead.)
- From the Admin center access, select Global Administrator and click Next
- After the account creation has completed, close the dialog.
- Following this, please send the new email address to your CIR POC(s) with the password being sent separately. We recommend options such as texting your POC the password or using a website such as OneTimeSecret or CloakMy and sending the POC an email with the link.