Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Content

Table of Contents
minLevel1
maxLevel1
outlinefalse
stylenone
excludeContent
typelist
printablefalse

...

The first step involves creating a ROOMZ application on Microsoft Azure to enable access to the agendas.

A. Open Microsoft Azure Portal and log in with an administrator account.

B. Once logged, search for Azure Active Directory:

...

 

C. On the left panel, search for App registrations:

...

D. Click on + New registration:

...

 

E. Specify the name of the application (e.g. ROOMZGraph) and the first option Account in this organizational directory only

...

 

F. Click on API permissions:

...

 

G. If you already have a permission, you can remove it.

...

H. Then click on + Add a permission, and select Microsoft Graph:

...

 

I. Choose Application permissions:

...

 

J. In the list of permissions, select Calendars.ReadWrite: and then click Add permissions:

...

 

K. Click on Grant admin consent for your company:

...

 

L. Once accepted, it should appear as follows:

...

 

M. Click on Certificates & secrets:

...

 

N. Click on + New client secret:

...

 

O. Specify the desired expiry date. When the secret expires, you'll need to renew it and update it in the ROOMZ Portal. Currently, the longest possible period is 2 years (even when selecting the "Custom" option). We recommend setting the expiry to 24 months.

...

P. Here you will find the Client Secret. This information will be required for the connector, you should copy it for example in your Notepad. It is important that you copy the Value of the client secret, and not the Secret ID

...

Q. When you click on "Overview" now, you will find the Application (client) ID and the Directory (tenant) ID. These two values will also be required for the connector, so please copy them too.

...

The following commands have to be executed using Exchange Online PowerShell with admin rights. Once executed, it might take up to 15 minutes before being effective.

A. Execute the following command and connect to your Microsoft365 using an admin account.

...

Expand
titleTo resolve errors related to the 'Connect-ExchangeOnline' command

Install or start Exchange Online PowerShell Module. You can install the Module directly in the PowerShell on your Computer:

  1. Update your PowerShell to the latest version by using the following commands:

    Code Block
    winget install --id Microsoft.Powershell --source winget

    Please note that if you had PowerShell V5 before, the new PowerShell V7 will be a new app on your PC, we recommend to use the version 7.x.

  2. Now you can install the Module by the following commands:

    Code Block
    Install-Module -Name ExchangeOnlineManagement

    If you get an error message like the following, you have to allow PowerShell to run scripts:

    Code Block
    Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope LocalMachine

    After the installation, we recommend to set the policy again to “restricted”:

    Code Block
    Set-ExecutionPolicy -ExecutionPolicy restricted -Scope LocalMachine
  3. You need to import the module :

    Code Block
    Import-Module ExchangeOnlineManagement

B. Create a Mail-enabled security group with the following command. Here the name of the group is RoomzResources. You have to replace the PrimarySmtpAddress with a valid domain name.

Code Block
New-DistributionGroup -Name RoomzResources -Alias RoomzResources -PrimarySmtpAddress RoomzResources@myorganization.com -Type security

C. Fill this group with the necessary rooms. Don't forget to change the name "RoomzResources" if you have used a different name, and replace my-room by the identifier of your meeting room :

...

Code Block
Get-Mailbox| where {$_.RecipientTypeDetails -eq "RoomMailbox"} | foreach {Add-DistributionGroupMember -Identity RoomzResources -Member $_.UserPrincipalName}

D. Apply an application access policy with the following command. Replace the myAppId with the Application (client) ID from the previous section. Replace RoomzResources with the name of the group you created.

Code Block
New-ApplicationAccessPolicy -AppId myAppId -PolicyScopeGroupId RoomzResources -AccessRight RestrictAccess -Description "Restricted ROOMZ Access"

E. In order to reduce the propagation time required by Microsoft Azure, this command can accelerate the process:

...

 The application is now restricted to access only the agenda of the group RoomzResources, which contains only meeting rooms needed. If you create new meeting rooms, please re-execute the command at point 5️⃣ .

4️⃣ Add a new resource to the Mail enabled security group

...