Additional guides, troubleshooting tips, and best practices.
| Service | Module | Command |
|---|---|---|
| Exchange Online | ExchangeOnlineManagement | Connect-ExchangeOnline |
| Security & Compliance | ExchangeOnlineManagement | Connect-IPPSSession |
| Microsoft Graph | Microsoft.Graph | Connect-MgGraph |
| Azure AD | AzureAD | Connect-AzureAD |
| Teams | MicrosoftTeams | Connect-MicrosoftTeams |
| SharePoint | Microsoft.Online.SharePoint.PowerShell | Connect-SPOService |
| Task | Exchange Role | Graph Scope |
|---|---|---|
| Manage mailboxes | Mail Recipients | User.ReadWrite.All |
| Manage groups | Distribution Groups | Group.ReadWrite.All |
| View audit logs | View-Only Audit Logs | AuditLog.Read.All |
| eDiscovery | eDiscovery Manager | eDiscovery.ReadWrite.All |
| Compliance | Compliance Administrator | Compliance.ReadWrite.All |
Cannot connect to Exchange Online:
- Verify MFA is configured
- Check if BasicAuth is disabled (use Modern Auth)
- Update ExchangeOnlineManagement module
Graph permission denied:
- Verify app registration consent
- Check scope requirements
- Request admin consent if needed
Hybrid mail flow issues:
- Verify connector configuration
- Check certificate validity
- Test MX record resolution
# Test Exchange connectivity
Test-OutlookConnectivity -ProbeIdentity OutlookRpc
# Check hybrid configuration
Get-HybridConfiguration
# Verify federation trust
Test-FederationTrust -UserIdentity admin@domain.com
# Check organization relationship
Get-OrganizationRelationship- Always use -WhatIf before bulk operations
- Export before delete - backup data before removing
- Use transactions where possible
- Log all changes for audit trail
- Test in lab before production