Configure Impersonation Roles in Office 365 (Push Service & OAuth)

Impersonation Roles are required for the ResourceXpress Push Service when 20 or more profiles are in use, it is also required to use Modern Authentication to EWS (OAuth).

The Push Service is an add-on to the ResourceXpress application and will be enabled by default for any Exchange/O365 integrated SaaS deployments. The benefit of using the Push Service is to reduce the number of requests made from ResourceXpress to the Exchange/Office 365 environment. Instead of the ResourceXpress server polling every 60 seconds any new bookings or updates are automatically pushed by the Exchange/Office 365 service to ResourceXpress.

Starting in October 2020 Microsoft will begin retiring Basic Authentication to EWS. When this happens the method of authentication used by ResourceXpress must be OAuth. Please refer to Office 365 OAuth 2.0 Configuration for further instructions on configuring OAuth.

Create a new Management Scope for Resource Mailboxes

Use the above ‘Connecting to PowerShell’ instructions to establish a PowerShell connection to your Tenant.

Copy and paste the code below, change the -Name value to suit your environment.

# Create Management Scope
New-ManagementScope -Name "RXResourceMailboxes" -RecipientRestrictionFilter {RecipientTypeDetails -eq "RoomMailbox"}

Log into your O365 tenant as an Admin and navigate to Admin - Admin Centers - Exchange.

Create a new role under Permissions - Admin Roles.

The Write scope will be the new Management Scope created in PowerShell.

The Members should include the ResourceXpress service account that has already been granted Full Access Permissions to the resource mailboxes.

Click Save.

Image Modified

To connect ResourceXpress to Microsoft Office 365, the Exchange Web Service URL is needed.

Most commonly, the URL will be: https://outlook.office365.com/EWS/Exchange.asmx

If this does not apply to your O365 account, please refer to this guideOffice 365 - Finding the EWS Address

Log onto ResourceXpress in your browser using your given URL and credentials.

Under Administration Settings on the top navigation bar, go to System Settings.

On the first tab you see (Resource Server), you will see the screen below:

Image Modified

Refer to the following table to fill in the information required:

Once the information above is entered, click Save.

Note: The use of OAuth authentication requires different fields to be populated. Please see Office 365 OAuth 2.0 Configuration for further information.

To check that ResourceXpress is successfully connected to Microsoft Office 365, enter the CAPTCHA image on the bottom of the page and click Check Server.

A successful connection will display a message similar to the image below:

Image Modified

To create a profile and connect it to an O365 resource, under Administration Settings go to Resource List.

On the top, right-hand corner, click on + Create and you should see the screen below.

Image Modified

Before connecting the profile, you will first be required to fill out some basic information in this Resource Info tab. Required fields are noted with an *. Once completed, click Save.

Once changes are successfully saved, click on the Connection Properties tab.

Most of the fields should already be filled in based on the information entered previously in the Systems Settings.

Image Modified

For the final step, enter the email address of the O365 resource you want to connect this profile to in the Resource Email line.

Click Save.