Go to file
Ivo Oskamp 80f4052756 Enhance Mail Import Setup with Application Access Policy security
Enhanced Mail Import Setup documentation with additional security measures:
- Step 1.3: Start with Mail.Read only (read-only) for initial testing
- Step 1.4 (NEW): Restrict access to one mailbox via Application Access Policy
  - Exchange PowerShell commands to create and test policy
  - Ensures app can only access backup mailbox, not all tenant mailboxes
  - Marked as "Optional but Recommended" following principle of least privilege
- Step 1.5: Add Mail.ReadWrite after testing (moved from 1.3)
- Updated Security Best Practices section to emphasize mailbox restriction
- Added security notes about starting read-only and rotating secrets (12 months)

Based on setup documented in /docker/develop/HOWTO-CREATE-GRAPH-APP.md

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-02-08 16:00:55 +01:00
containers/backupchecks Enhance Mail Import Setup with Application Access Policy security 2026-02-08 16:00:55 +01:00
deploy Auto-commit local changes before build (2026-01-01 16:09:56) 2026-01-01 16:09:56 +01:00
docs Enhance Mail Import Setup with Application Access Policy security 2026-02-08 16:00:55 +01:00
.gitignore Auto-commit local changes before build (2026-01-01 16:09:56) 2026-01-01 16:09:56 +01:00
.last-branch Add all documentation placeholder pages and fix content errors 2026-02-08 11:34:44 +01:00
build-and-push.sh Auto-commit local changes before build (2026-01-01 16:40:37) 2026-01-01 16:40:37 +01:00
LICENSE Auto-commit local changes before build (2026-01-01 16:09:56) 2026-01-01 16:09:56 +01:00
README.md Auto-commit local changes before build (2026-01-01 16:09:56) 2026-01-01 16:09:56 +01:00
TODO-audit-logging.md Auto-commit local changes before build (2026-02-07 21:41:42) 2026-02-07 21:41:42 +01:00
TODO-documentation.md Complete Mail & Import documentation section (4 pages) 2026-02-08 15:44:51 +01:00
TODO-reports-improvements.md Add comprehensive TODO for reports improvements 2026-02-07 23:36:23 +01:00
version.txt Release v0.1.22 on branch v20260205-13-changelog-python-structure (bump type 1) 2026-02-05 23:29:46 +01:00