Microsoft 365
Prerequisites
Administrator roles, PowerShell modules and a one-time Exchange Online preparation step.
Administrator roles
| Task | Minimum role |
|---|---|
| Approve the Clad application | Global Administrator or Privileged Role Administrator |
| Create the mail access group and scope mail access | Exchange Administrator (or the Organization Management role group) |
| Configure employee sign-in | Cloud Application Administrator or Application Administrator |
| Grant SharePoint sites | SharePoint Administrator, once a Global or Privileged Role Administrator has consented to Sites.FullControl.All for Microsoft Graph PowerShell |
PowerShell modules
Install the modules once on the machine you will run the setup commands from. The Microsoft Graph module is only needed for SharePoint.
Install-Module ExchangeOnlineManagement -Scope CurrentUser
Install-Module Microsoft.Graph.Sites -Scope CurrentUserPrepare Exchange Online
Some tenants must enable organization customization once before custom management scopes can be created. The command below only runs it if your tenant needs it, and is safe to run either way.
Connect-ExchangeOnline
if ((Get-OrganizationConfig).IsDehydrated) {
Enable-OrganizationCustomization
}Run this the day before
When customization is enabled, it can take up to an hour before Exchange accepts the management scope created in the Email setup. Running it a day ahead avoids waiting mid-setup.
Clad is operated by Docshield Inc. · Wilmington, DE · New York, NY