Configure Rest API

Your download is in progress and it will be complete in just a few seconds! If you face any issues, download manually here

Thank you for registering with ManageEngine.

We will send the download link to the registered email ID shortly.

Manage and Secure Microsoft 365 with M365 Manager Plus

  •  
  •  
  •  
  • By clicking 'Download 30-day free trial' you agree to processing of personal data according to the Privacy Policy.

Enabling REST API access will allow you to use multi-factor authentication as configured in your Microsoft 365 account. Once enabled, the user will be diverted to the Microsoft 365 login portal for authentication to use M365 Manager Plus. REST API is also essential to generate reports on your Microsoft 365 setup.

Steps to configure REST API

Automatic configuration

  1. Login to M365 Manager Plus' admin portal.
  2. Choose the Tenant Settings option found at the top right corner.
  3. Select the Enable Now option found under the Rest API Access column, corresponding to the Microsoft 365 tenant for which REST API access must be enabled.
  4. You will be diverted to the Microsoft 365 login portal. Enter the credentials of the global admin account you had configured in M365 Manager Plus.
  5. Click Sign-in.
  6. An application for M365 Manager Plus will be created automatically. And, you will now see a page that displays the list of permission that the application needs.
  7. Go through the list and click Accept.
  8. You will now be redirected to M365 Manager Plus console and REST API Access will be Enabled for the account you configured.
NOTE: If you want to change the permissions required by the application, perform manual configuration.

Manual Configuration

If the automatic configuration was not successful due to permission issues, REST API Access must be configured manually. The error message will show you a pop-up where you should fill the appropriate values to complete the configuration.

Configure Rest API

Azure Portal

  1. Sign in to Azure AD portal using the credentials of the Global Administrator account for which you need to enable REST API.
  2. Select Azure Active Directory from the left pane.
  3. Select App registrations.
  4. Click on New registration.
  5. Provide a Name of your choice for the M365 Manager Plus application to be created.
  6. Select a supported account type based on your organizational need.
  7. Don't enter anything for Redirect URI (optional), you'll configure it in the next few steps.
  8. Click on Register to complete the initial app registration.
  9. You will now see the Overview page of the registered application.
  10. Click on Add a Redirect URI.
  11. Click on Add a platform under Platform configurations.
  12. In the Configure platforms pop-up, click on Web under Web applications.
  13. In the REDIRECT URI field, enter http://localhost:port_number/webclient/VerifyUser.
    For example, http://localhost:8365/webclient/VerifyUser or https://192.345.679.345:8365/webclient/VerifyUser.
  14. You can leave the Logout URL and Implicit grant fields empty. Click on Configure.
  15. In the Authentication page, Under Redirect URIs, click on Add URI.
  16. Enter http://localhost:port_number/webclient/ GrantAccess as the Redirect URI. For example, http://localhost:8365/webclient/GrantAccess or https://192.345.679.345:8365/webclient/GrantAccess.
  17. Again click on Add URI to add https://demo.o365managerplus.com/oauth/redirect, https://manageengine.com/microsoft-365-management-reporting/redirect.html and https://identitymanager.manageengine.eu/api/public/v1/oauth/redirect as REDIRECT URIs in the subsequent rows.
  18. Configure Rest API

    Note: The REDIRECT URI must be,

    • Less than 256 characters in length.
    • Should not contain wildcard characters.
    • Should not contain query strings
    • Must start with HTTPS or http://localhost
    • Must be a valid and unique URL.
      Based on the Connection Type (http/https) you have configured in M365 Manager Plus, the REDIRECT URI format varies.
    • For http, the URI value is, http://localhost:8365. Machine name or IP address cannot be used in place of localhost, if http is used.
    • For https, the URI value is, https://192.345.679.345:8365 or https://testmachine:8365.

    To find your machine's IP, open Command Prompt, type ipconfig and click enter. You can find your IPv4 Address in the results shown.

  19. Click on Save.
  20. Click on Manifest in the left pane.
  21. Look for requiredResourceAccess array in the code.
  22. Copy the entire content in this file and paste it in the section that is highlighted in the below image.
  23. Note:

    • If your tenant is created in Azure Germany, copy the entire content in this file and paste it in the section that is highlighted in the image below.
    • If your tenant is created in Azure China, copy the entire content in this file and paste it in the section that is highlighted in the image below.

    Configure Rest API

    Note: Copy-paste content only from the open square bracket to the close square bracket. Ensure that all punctuation marks are retained correctly. Once you have pasted the file, it should look like the below image.

    Configure Rest API

  24. Click on Save.
  25. Click on API permissions in the left pane.
  26. In the Configured permissions section, click on ✓ Grant admin consent for <your_company_name>.
  27. Click on Yes in the pop-up that appears.
  28. Click on Certificates & secrets from the left pane.
  29. Under the Client secrets section, click on New client secret.
  30. This section generates an app password for M365 Manager Plus. In the Description field of the pop-up, provide a name to identify the app to which the password belongs.
  31. Choose when the password should expire.
  32. Click on Add.
  33. Copy the string under VALUE and save it. This is the Application secret key which you will require later.
  34. Configure Rest API

  35. Now go to the Overview section in the left pane.
  36. Copy the values of Application (client) ID and Object ID, and save them. You will need these values to configure your tenant in the M365 Manager Plus portal.
  37. Configure Rest API

  38. Ensure that the Help desk administrator and Privileged authentication administrator roles are assigned to the application.

M365 Manager Plus portal

  1. Now go back to the M365 Manager Plus console where you have the pop-up.
  2. Configure Rest API

  3. Enter your Tenant Name. For example, test.onmicrosoft.com
  4. Paste the Application ID and Application Object ID values which were copied in Step 33, in the respective fields.
  5. For Application Secret Key, paste the value which was copied in Step 31.
  6. Click on Add Tenant.
  7. You can now see that the Rest API Access is Enabled for the account you had configured.

Why businesses choose M365 Manager Plus?

What our customers say

  • We can now effectively reconcile which licenses we are using in the organization and assign the cost to the business unit. We were also able to identify a number of license changes that could be put in place that reduced our total Microsoft 365 spending.

    Timothy Ransom
    Group IT/IS manager at The Eclipse Group, United Arab Emirates

  • M365 Manager Plus is valuable to our future business and, most importantly, it allows me to keep improving the level of service we provide.

    IT infrastructure manager
    Sunstar Suisse S.A.

  • Our firm purchased ManageEngine M365 Manager Plus to help us protect our business from email-borne cyberthreats. We are absolutely satisfied with the features and ease of use. It has surpassed our expectations.

    Insurance agent
    Security and risk management Gartner review

A holistic Microsoft 365 administration solution

One-stop solution for all your
Microsoft 365 administration needs!

Download now