> For the complete documentation index, see [llms.txt](https://docs.storware.eu/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.storware.eu/backup-and-recovery-71/protecting-microsoft-365/microsoft-365-organization-management/add-microsoft-365-organization-using-the-setup-assistant.md).

# Add Microsoft 365 organization using the Setup Assistant

To add your Microsoft 365 organization to Storware Backup & Recovery server using Setup Assistant, do as follow:

1. Go to the **Cloud** menu -> **Service Providers** -> click the **Setup Assistant** button.
2. In the **Wizard** window read the information and click the **Next** button to go to the next step.
3. Copy the authorization code -> click the link **<https://microsoft.com/devicelogin>** and enter it -> sign in to your Microsoft 365 organization as a user with administrator's rights. Now close the tab and go back to **Setup Assistant**.
4. Provide number of application and click **Create** button. The application tenant is created. Click the **Next** button to go to the next step.
5. Follow the instructions in **Setup Assistant**. If the **Lookup** button is not working and fields are not automatically populated the user needs to put there the following:
   * for the Title field: Storware Backup and Recovery
   * for the App domain field: localhost
6. In the next step, click **Grant permissions** button. You will be redirected to the the page where you need to accept permissions.
7. Execute provided PowerShell commands and click **Save** button.
8. The configuration is now complete. Save your settings by clicking the **Save** button.

{% hint style="info" %}
We recommend creating 1 application for every 500 users.
{% endhint %}

## Required permissions

1. Since you're granting tenant scoped permissions this granting can only be done via the **appinv.aspx** page on the tenant administration site. You can reach this site by typing the address: **<https://tenantName-admin.sharepoint.com/\\_layouts/15/appinv.aspx>**. (replace the **tenantName** with your tenant name). Once the page is loaded, do as follow:
2. Enter your App Id (client ID) and click the **Lookup** button.
3. Enter the App Domain name.
4. In the "**App's Permission Request** **XML"** window enter the following lines:

   ```
   <AppPermissionRequests AllowAppOnlyPolicy="true">
       <AppPermissionRequest Scope="http://sharepoint/content/tenant" 
        Right="FullControl" />
    </AppPermissionRequests>
   ```
5. When you click on the **Create** button you'll be presented with a permission consent dialog. Press the **Trust It** button to grant the permissions.
6. Open Powershell command prompt and execute the command:

   ```
   Install-Module -Name Microsoft.Online.SharePoint.Powershell
   ```

   or download and install the module directly from this [site](https://www.microsoft.com/en-us/download/details.aspx?id=35588)

   then

   ```
   Connect-SPOService https://tenantName-admin.sharepoint.com
   Set-SPOTenant -LegacyAuthProtocolsEnabled $True
   Set-SPOTenant -DisableCustomAppAuthentication $false
   ```

   It enables the **LegacyAuthProtocolsEnabled** setting.

{% hint style="info" %}
**Note:** Go to the [Account auto-synchronization](/backup-and-recovery-71/protecting-microsoft-365/microsoft-365-organization-management/account-auto-synchronization.md) to learn how to synchronize Microsoft 365 accounts.
{% endhint %}