During the sign-up process, you must supply the Office 365 administrator login, in order to allow the creation of the CoreView service accounts within your tenant.
These administrator credentials entered are never stored in 4ward systems.
CoreView system users do not require Office 365 licensing and are used only during import procedure. They are members of a CoreView group with view only permissions on tenant and cannot be used to perform changes in the system.
CoreView Roles has following assigned roles on Office 365:
- View-Only Configuration
- View-Only Recipients
- CoreView Recipient Permissions
- User Options
- View-Only Audit Logs
- User Account Administrator
- Reports Reader
- Security Reader
CoreView Recipient Permissions is a custom role with Get-RecipientPermission permission, needed to get additional mailboxes information during Import.
For the time being our Admin users are part of SharePoint Admin group in order to be able to connect to PowerShell and Admin Portal and retrieve additional information from tenant. In future this permission will be removed for customers using Advanced Management, and management user will be used for this import steps.