Setting up a Dedicated Service Account for CiraSync in Office 365

When using CiraSync Enterprise Edition, you will need a Dedicated Service Account in Office 365 for CiraSync to manage the Global Address List (GAL), Public Folder, and User/Shared Mailbox sync for an entire Office 365 tenant. This guide shows how to create and set up a dedicated Service Account for CiraSync in both the old and new Office 365 Admin Center. Learn more about the requirements, here.

Why Should I Create a Dedicated Service Account?

The dedicated Service Account comes with these benefits:

• The password expires periodically when using personal Office 365 credentials: the dedicated Service Account password can be set to never expire.
• A dedicated Service Account allows users to freely give and restrict access to specific accounts in the Office 365 Tenant.
• The dedicated Service Account can be disabled without affecting other accounts and functions of CiraSync.
• Access to this account can be given to other users without revealing the account’s password.

NOTES

• The Service Account needs Global Admin role only while logging into the Dashboard for the first time, in order to be able to accept permissions used by Microsoft to generate a Token. This Token is used by CiraSync to access Contacts, Calendars and Sticky Notes within the Tenant. After logging in, it can be downgraded to a User Mailbox.
• The Service Account can have MFA added to it, but we suggest that it is done before the initial login.
• If the source is a Public Folder, the Service Account needs a license in Office 365 – the least expensive one is sufficient – and to be added as a Reviewer to it.
• If the source is a User/Shared Mailbox, the Service Account needs a license in Office 365, the least expensive one is sufficient.
• If the source is a GAL, the Service Account does not need a license in Office 365. Regardless of the source type, it does not need a license in CiraSync.
•  If the Source is Dynamic Distribution List the Service Account need a license in Office 365 – the least expensive one is sufficent.”

Instructions

Creating a Dedicated Service Account with the Old Admin Center

1. Launch the Office 365 Admin Center.
2. Click on Users > Active users on the left navigation panel. (See figure below.)
3. Click the + Add a user button.
4. Provide a Display Name and a Username for the Service Account.
5. Click Contact Information and fill in the required fields.
6. Click Password to a create a password for this new account.
7. Click Roles, and then select Global Administrator. 
8. Click Product Licenses and assign license, if required.
9. Click Add.

Creating a Dedicated Service Account with the New Admin Center

Microsoft recently put their new Admin Center on trial. The following instructions are for users who switched to the new Admin Center.

1. Launch the Office 365 Admin Center.
2. Click on Users > Active Users in the left navigation panel. (See figure below.)
3. Click the + Add a user button. The Add a User wizard will pop out on the right side of the window. (See figure below.)
4. Fill in the required fields.
5. Click Let me create the password option under Password settings.
6. Create a strong password for the account.
7. Click Send password in email upon completion. 
8. Click Next. You will be taken to Assign product licenses portion of the wizard. (See figure below.)
9. Select the location of the Service Account.
10. Select an Exchange License or the Create user without product license option.
11. Click Next. You will be taken to the Optional settings portion of the wizard. (See figure below.)
12. Click Roles. This will expand the User Roles section of the wizard.
13. Select Admin center access > Global admin.
14. Click Next. You will be taken to the Review and finish adding portion of the wizard.
15. Review all the information provided to the wizard > Click Finish adding.

Next Article: Setting Impersonation Mode to Sync to User Mailboxes