Enhanced Mail Import Setup documentation with additional security measures: - Step 1.3: Start with Mail.Read only (read-only) for initial testing - Step 1.4 (NEW): Restrict access to one mailbox via Application Access Policy - Exchange PowerShell commands to create and test policy - Ensures app can only access backup mailbox, not all tenant mailboxes - Marked as "Optional but Recommended" following principle of least privilege - Step 1.5: Add Mail.ReadWrite after testing (moved from 1.3) - Updated Security Best Practices section to emphasize mailbox restriction - Added security notes about starting read-only and rotating secrets (12 months) Based on setup documented in /docker/develop/HOWTO-CREATE-GRAPH-APP.md Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| containers/backupchecks | ||
| deploy | ||
| docs | ||
| .gitignore | ||
| .last-branch | ||
| build-and-push.sh | ||
| LICENSE | ||
| README.md | ||
| TODO-audit-logging.md | ||
| TODO-documentation.md | ||
| TODO-reports-improvements.md | ||
| version.txt | ||