Exchange Web Service Connector 25.4
Exchange Web Service Connector Help

# ExchangeOnlineAclUseOnPremiseSID

Specifies whether to resolve Exchange Online e-mail addresses into domain user names (`DOMAIN\User`) before adding them to ACLs. The connector can do this if the users in Exchange Online were synchronized from a local LDAP server, by reading the `OnPremisesSecurityIdentifier` attribute that is stored in Azure Active Directory for each user.

This feature uses the Microsoft Graph API so you must configure OAuth authentication in addition to the Exchange Username and Password. For more information about how to configure OAuth authentication, refer to the Exchange Web Service Connector Administration Guide.

When you set this parameter to `false` (or Exchange Online users do not have an `OnPremisesSecurityIdentifier` attribute), e-mail addresses are used in ACLs instead.

Type: | Boolean
Default: | False
Required: | No
Configuration Section: | TaskName or FetchTasks
Example: | `ExchangeOnlineAclUseOnPremiseSID=True`
See Also: | MappedSecurity

Copyright 2025 Open Text
Version 25.4 | Last updated October 2025

Send documentation feedback

Close

Send documentation feedback

To send feedback using your default email client, open an email window.

Otherwise, send your feedback and the information below to MFI-swpdl.idoldocsfeedback@opentext.com.

We appreciate your feedback!

Product: Knowledge Discovery Exchange Web Service Connector 25.4

Topic Title: ExchangeOnlineAclUseOnPremiseSID