New in this release

Version 2.0.0 adds a number of new features and enhancements to ActiveRoles Server Add-on for Office 365. With this latest version of the add-on you can:

• Create Office 365 users rather than mailboxes. When you create an Office 365 user, you can choose whether to license that user for Exchange Online.
• Create security groups and distribution groups in Office 365. You can choose the type of the Office 365 group that you want to create.
• Assign licenses to Office 365 users. When creating or administering a user, you can choose the Office 365 licenses that you want to assign to that user.
• Delegate the task of assigning Office 365 licenses. By allowing read/write access to individual edsvaOffice365-License-* user attributes, you can specify what licenses the delegated administrator can assign to Office 365 users.
• Restrict the licenses for Office 365 users. You can configure a policy to specify what Office 365 licenses can be assigned depending on user location in Active Directory.
• Restrict the domains for Office 365 users and groups. You can configure a policy to specify what Office 365 domains can be selected depending on user or group location in Active Directory.
• View or change the Office 365 specific object properties. You can edit Office 365 users, groups and contacts.
• Examine Office 365 licenses and license usage. For each of your license subscriptions, you can view how many licenses are valid, expired or assigned. This information is displayed on the add-on application page in the ActiveRoles Server console.
• Examine Office 365 domains. For each of your Office 365 domains, you can view the status of the domain and see whether the domain is configured for single sign-on (federated). This information is displayed on the add-on application page in the ActiveRoles Server console.
• Associate existing Office 365 users with on-premises Active Directory users. The synchronization workflow uses the GUID and primary SMTP address to match an existing Office 365 user to the appropriate on-premises Active Directory user.

Description

ActiveRoles^® Server Add-on for Office 365 enables ActiveRoles Server to create Microsoft Office 365 cloud users, groups and contacts for your on-premises Active Directory users, groups and contacts, and allows their properties to be synchronized from ActiveRoles Server to the cloud. The add-on uses Quest One Quick Connect to perform data synchronization from ActiveRoles Server to Office 365, allowing you to create and administer Office 365 users, groups and contacts from the ActiveRoles Server Web Interface.

With this add-on, the capabilities of ActiveRoles Server have been extended to support the following administrative tasks:

• Create an Office 365 user account associated with a given Active Directory user account.
• Synchronize user properties from Active Directory user accounts to their associated Office 365 user accounts.
• View or change the properties of the Office 365 user account associated with a given Active Directory user account.
• Assign Office 365 licenses to the Office 365 user account associated with a given Active Directory user account.
• Delete the Office 365 user account associated with a given Active Directory user account.
• Create an Office 365 security group or distribution group associated with a given Active Directory group.
• Synchronize group properties, including the members list, from Active Directory groups to their associated Office 365 groups.
• View or change the properties of the Office 365 group associated with a given Active Directory group.
• Delete the Office 365 group associated with a given Active Directory group.
• Create an Office 365 external contact associated with a given Active Directory contact.
• Synchronize contact properties from Active Directory contacts to their associated Office 365 external contacts.
• View or change the properties of the Office 365 external contact associated with a given Active Directory contact.
• Delete the Office 365 external contact associated with a given Active Directory contact.
• View Office 365 domain and license information.

The add-on performs administrative tasks in an asynchronous fashion. The changes you make through the Web Interface are not immediately applied to Office 365. ActiveRoles Server saves the changes and then waits for Quick Connect to apply the changes to Office 365. The changes are applied by running a synchronization workflow on a scheduled basis. You can also run the synchronization workflow before or after it's scheduled to run.Important If Active Directory synchronization using the Microsoft Online Services Directory Synchronization tool is activated, then this add-on can only master licensing of Office 365 users. All changes to Office 365 objects, with the exception of licensing, are mastered from the properties of the corresponding objects in your on-premises Active Directory. If you want this add-on to create and administer Office 365 users, groups and contacts, ensure that Microsoft's tools are not used for synchronizing your on-premises Active Directory and Office 365, and choose the add-on configuration option indicating that native sync between Active Directory and Office 365 is not activated. For details about Active Directory synchronization, see Microsoft's article "Active Directory synchronization: Roadmap" athttp://onlinehelp.microsoft.com/en-us/office365-enterprises/ff652543.aspx.You can use this add-on to create and administer users in Office 365 domains configured for single sign-on (federated domains) provided that you:

• Don't use the Microsoft Online Services Directory Synchronization tool.
• Have selected the add-on configuration option indicating that native sync between Active Directory and Office 365 is not activated.

This add-on is able to perform all synchronization tasks required for single sign-on to function, so you can use it instead of directory synchronization tools of Microsoft's.

All these tasks are performed in an asynchronous fashion. The changes requested through ActiveRoles Server are not immediately applied to Office 365; rather, they are queued, and then applied on a scheduled basis.

Screenshots and videos

(Please visit the site to view this file)