# ExchangeOnlineAclUseOnPremiseSID

Specifies whether to resolve Exchange Online e-mail addresses into domain user names (`DOMAIN\User`) before adding them to ACLs. The connector can do this if the users in Exchange Online were synchronized from a local LDAP server, by reading the `OnPremisesSecurityIdentifier` attribute that is stored in Azure Active Directory for each user.

This feature uses the Microsoft Graph API so you must configure OAuth authentication in addition to the Exchange Username and Password. For more information about how to configure OAuth authentication, refer to the Exchange Web Service Connector Administration Guide.

When you set this parameter to `false` (or Exchange Online users do not have an `OnPremisesSecurityIdentifier` attribute), e-mail addresses are used in ACLs instead.

Type: | Boolean
Default: | False
Required: | No
Configuration Section: | TaskName or FetchTasks
Example: | `ExchangeOnlineAclUseOnPremiseSID=True`
See Also: | MappedSecurity

_FT_HTML5_bannerTitle.htm