Task 1.2: Create an app for the Microsoft Graph connector agent

The new app registration provides a mechanism for the agent to securely connect to Microsoft 365.

1. Switch to Microsoft Edge and the Microsoft 365 admin center at https://admin.microsoft.com.

2. In the left navigation, select Identity.
   If necessary, select Show all.

3. In the Microsoft Entra admin center, on the left menu, select Applications > App registrations.

4. On the App registrations page, on the menu, select + New registration.

5. On the Register an application page, in the Name box, enter MGca-Contoso.

6. Review the remaining settings and then select Register.

7. Copy the Application (client) ID to a text file and save it so you can use it later in the lab.

8. In the left menu, select API permissions.

9. In the Configured permissions list, select Microsoft Graph.

10. On the Request API permissions pane, select Application permissions.

11. Under Select permissions, in the search box, enter ExternalItem.ReadWrite.OwnedBy.

12. In the results, expand ExternalItem and then select the ExternalItem.ReadWrite.OwnedBy checkbox.

13. Search for and then select the checkboxes for the following permissions:

    • ExternalItem.ReadWrite.All
    • ExternalConnection.ReadWrite.OwnedBy
    • Directory.Read.All

14. Select Update permissions.

15. Verify the new permissions have been added.

16. Under Configured permissions, select Grant admin consent.

17. In the Grand admin consent confirmation dialog box, review the information and then select Yes.

18. Verify the Status of all permissions are now listed as Granted.