Onboarding Exclaimer for Client-Side (Microsoft 365)

To configure Client-Side signatures:

1. Select Connect.
    
2. Sign in using your Microsoft Global Administrator credentials.
    
3. You are prompted to accept a permissions request for Exclaimer to read your Entra ID (formerly Azure AD) data. Select Accept.
   
   
   _{Permissions request for Exclaimer to read Azure AD data.}
   
    
4. Select which members of your organization you wish to set up Exclaimer signatures for: 
    
   • Select Full (Recommended) to allow all users and groups within your organization to have Exclaimer signatures.  
      
   • Select Limited to specify a group within your organization. This will allow only users and groups that are members of this specific group to have Exclaimer signatures. For more information on creating groups, see How to create a mail-enabled security group.
     
     
     _{Select which members of your organization you wish to synchronize with Exclaimer.}
      
5. Select Continue.
    

6. Select Launch AppSource to install Exclaimer for Outlook from the Microsoft AppSource.
   
   
   _{Select Launch AppSource.}
   
   The Microsoft AppSource screen is displayed.

   We recommend: Sign out of any Microsoft 365 accounts that are not a Global Administrator account for the organization you are trying to deploy the Add-in for. This will help prevent any issues with the installation process of picking up cached credentials and potentially causing a failure.
7. Select Get it now.
   
   
   _{Select Get it now.}
   
   The Sign in to Microsoft AppSource window is displayed.
    
8. Enter your email address in the Work, school or Microsoft account field.
   
   
   _{Enter Admin email address.} 
    
9. In the The Confirm your details to continue window, select Get it now.
   
   
   _{Select Get it now.}
    

10. In the Deploy New App window, select which assigned users should have access to the Exclaimer Outlook Add-in:

    • Just me: Select to assign only yourself, in your organization, access to the Exclaimer Outlook Add-in.
       
    • Entire organization: Select to assign everyone in your organization access to the Exclaimer Outlook Add-in.
       
    • Specific users/groups: Select to assign specific users or groups within your organization access to the Exclaimer Outlook Add-in. Enter a specific user or group name; this is a predictive text field, so it will display any matching users or groups as you start to type.
    NOTE: You cannot use nested groups.

    
    
    _{Example showing Entire organization option selected.}
     

11. Select Next to proceed. 
     
12. Select Accept permissions.
    
    
    _{Select Accept permissions.}
     
13. Sign in to Microsoft 365 as a Global Administrator.
    
    
    _{Login as Global Administrator.}
     
14. Once signed in, you are prompted to accept a permissions request for Exclaimer - Signatures for Outlook. This will allow the Add-in to verify that the user is authorized to download the signatures. Select Accept.
    
    
    _{Permissions request for Exclaimer - Signatures for Outlook.} 
     
15. Select Next to proceed.
    
    
    _{Select Next.}
     
16. Review your selected settings for the deployment.
    
    When you have reviewed and are happy with the options selected, select Finish deployment to complete the deployment process.
    
    When the deployment process is complete, a completion message is displayed.
    
    
    _{Deployment complete.}
     

17. Select Done to proceed.
    
    The Integrated apps screen is displayed, listing the Exclaimer for Outlook app.
    
    
    _{Integrated apps showing Exclaimer for Outlook configured.}

    NOTE: It may take some time for the Exclaimer for Outlook app to appear within the Integrated Apps list. Select Refresh to refresh the list.

    After a successful onboarding, the dashboard status of the Client-Side configuration changes to Connected.
    
    
    _{Client-Side dashboard status: Connected.}
     

    NOTE: The Add-in can take up to 72 hours to deploy. We recommend rolling it out to the entire organization or the correct group before the go-live date.
18. Select Re-install to make changes to the onboarding settings. 

If your Microsoft 365 Global Administrator account has the Global Administrator role assigned through a group or PIM (Product Information Management), your configuration may fail. The role must be assigned as Direct. You can check how the role is assigned in Entra ID (formerly Azure AD) and reassign it correctly if necessary. 

To check and reassign the role in Entra ID:

1. Log in to Entra ID (formerly Azure AD) at https://entra.microsoft.com/
    
2. Navigate to the account and select the account name. 
    
3. From the menu sidebar, select Assigned roles. 
    
   
   _{Select Assigned roles.}
    
4. In the Active assignments list, locate the Global Administrator role and check the value in the Membership column. This must show Direct. If it shows Group, you need to reassign the role. 
   
   
   _{An example of the Membership value showing Group.}
    
5. To reassign the role, remove the current assignment by selecting Remove in the Action column.
    
   
   _{Select Remove to delete the Group assignment.}
    
6. Select +Add assignments from the header row. 
    
   
   _{Select Add assignments.}
    
7. Select the Setting tab.
    
   
   _{Open the Setting tab.}
    
8. Under Assignment type, select the Active radio button.
    
9. In the Enter justification text field, enter a reason for assigning.
    
10. Select Assign.  
     
11. Cancel any previous Microsoft 365 processes and attempt to connect to Exclaimer again. 

If the problem persists, query Microsoft Graph Explorer to see if the role has assigned correctly.

To query Microsoft Graph Explorer:

1. Sign in to Microsoft Graph Explorer using Global Administrator credentials. 
    

2. If prompted, accept the permissions request.

   NOTE: You do not need to select the Consent on behalf of your organization checkbox.
3. In the main Graph Explorer pane, select the Modify Permissions tab.
   
   
   _{Open the Modify Permissions tab.}
    
4. Locate the row for Directory.Read.All and select Consent. 
   
   
   _{Select Consent on the Directory.Read.All row.}
    

5. When prompted, accept the permissions request.

   NOTE: You do not need to select the Consent on behalf of your organization checkbox.

6. In the query entry field, enter the following text:

   https://graph.microsoft.com/v1.0/directoryRoles(roleTemplateId='62e90394- 69f5-4237-9190- 012177145e10')/members/microsoft.graph.user?$select=displayName,mail

   
   _{Enter the text in the field.}
    

7. Select Run query.
    
8. Check the Response preview window for the account you created in the previous process. If it is not present, re-check that the role assignment is Direct and not Group. If the problem persists, raise a Support ticket.