Skip to main content
All CollectionsEmail Quarantine AutomationEQA Installation Instructions
Setup EQA with Office 365
Setup EQA with Office 365
Soumalya Mitra avatar
Written by Soumalya Mitra
Updated over a week ago

Setting up Email Quarantine Automation (EQA) with Office 365 is easy. This setup allows you to automatically quarantine selected emails on your Office 365 account.

There are three easy steps to setup EQA with Office 365 account:

  1. Start Office 365 account integration

  2. Authorize your Office 365 account

  3. Make additional configurations

Start Office 365 account integration

  1. In the Right-hand portal, navigate to Email Quarantine Automation (EQA) > Connect with O365.

  2. If one of the two integrations is already configured, then navigate Email Quarantine Automation (EQA) > Query > Settings > Office365 > Connect with O365.
    ​

Authorize your Office 365 account

  1. After you click on the Connect with O365 button, you will be asked to authorize your O365 account.

  2. Please note that you need to authorize your admin O365 account for the integration to work.

  3. The Microsoft O365 authorization prompt will inform you about the various permissions Right-Hand requires for your organization to provide email protection.


    ​

  4. The following permissions are requested by Right-Hand to integrate EQA with O365:

    • Maintain access to data you have given it access to

      1. Allows the app to see and update the data you gave access to, even when users are not currently using the app. This does not give the app any additional permissions.

      2. This permission is requested to access your data in Right-Hand.

    • Read all users' full profiles

      1. Allows the app to read the full set of profile properties, reports, and managers of other users in your organization, on behalf of the signed-in user.

      2. This permission is requested to access your data in Right-Hand.
        ​

    • Read directory data

      1. Allows the app to read data in your organization's directory, such as users, groups, and apps.

      2. This permission is requested to access your data in Right-Hand.
        ​

    • Read and write access to user mail

      1. Allows the app to create, read, update, and delete emails in user mailboxes. Does not include permission to send mail.

      2. This permission is requested to access your data in Right-Hand.
        ​

    • Read all users' full profiles

      1. Allows the app to read user profiles without a signed-in user.

      2. This permission is requested to access your data in Right-Hand.
        ​

    • Read and write mail in all mailboxes

      1. Allows the app to create, read, update, and delete mail in all mailboxes without a signed-in user. Does not include permission to send mail.

      2. This permission is requested to access your data in Right-Hand.
        ​

    • Read directory data

      1. Allows the app to read data in your organization's directory, such as users, groups, and apps, without a signed-in user.

      2. This permission is requested to access your data in Right-Hand.

  5. Click Accept. After a successful authorization of your O365 admin account, your integration would be complete.
    ​

Make additional configurations

You can make additional configurations by clicking on Settings and then go to the Configurations tab.

  1. Enable Delete option - If this option is enabled, the admin will be able to delete an email that matches the query from an employee's inbox. It is recommended to be careful while using this feature as the deleted email(s) cannot be recovered.
    ​

  2. Enable Email Filtration - If this feature is enabled, the whitelisted domain(s) will be excluded from the query search results. It is useful when you run phishing simulation campaigns and want such emails to reach the inbox.

Did this answer your question?