ExchangeAdminWeb/appsettings.json.sample at master · AlsoBeltrix/ExchangeAdminWeb · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
{
  "Serilog": {
    "MinimumLevel": {
      "Default": "Information",
      "Override": {
        "Microsoft.AspNetCore": "Warning",
        "Microsoft.Hosting.Lifetime": "Information"
      }
    }
  },
  "ExchangeOnline": {
    "AppId": "YOUR-APP-ID-HERE",
    "Organization": "yourorg.onmicrosoft.com",
    "CertificateSubject": "CN=EXO-Automation"
  },
  "Audit": {
    "LogRoot": "E:\\WWWOutput",
    "RotationPeriod": "daily"
  },
  "OperationTrace": {
    "Enabled": true
  },
  "_EmailNote": "If your SMTP relay requires authentication, source SmtpPassword from the deployment's PAM/secret-management solution (Delinea Secret Server today) rather than storing a plaintext password in this file - see docs/ProjectConstitution.md Credential Isolation. Leave SmtpUsername/SmtpPassword blank for an open, credential-less relay.",
  "Email": {
    "SmtpHost": "smtp.yourcompany.com",
    "SmtpPort": 25,
    "SmtpUsername": "",
    "SmtpPassword": "",
    "SmtpUseSsl": false,
    "FromAddress": "exchangeadmin@yourcompany.com",
    "FromName": "Exchange Admin",
    "AdminNotificationEmail": "itadmin@yourcompany.com",
    "NotifyUsersOnPermissionGrant": false
  },
  "_SectionAccessNote": "Section access is now managed per-module via the admin UI (/module-config/{ModuleId}). The aliases below are provided as a reference for all configurable policy aliases. On fresh installs, configure section access through the UI rather than editing this file.",
  "Security": {
    "AdminGroups": [
      "DOMAIN\\Exchange-Admins"
    ],
    "SectionAccess": {
      "MailboxPermissions": ["DOMAIN\\Exchange-Admins"],
      "MailboxPermissionsOnPrem": ["DOMAIN\\Exchange-Admins"],
      "GroupManagement": ["DOMAIN\\Exchange-Admins"],
      "GroupManagementOnPrem": ["DOMAIN\\Exchange-Admins"],
      "M365GroupManagement": ["DOMAIN\\Exchange-Admins"],
      "Comms10k": ["DOMAIN\\Exchange-Admins"],
      "ADAttributeEditor": ["DOMAIN\\Exchange-Admins"],
      "ADAttributeEditorLevel1": ["DOMAIN\\Exchange-Admins"],
      "ADAttributeEditorLevel2": ["DOMAIN\\Exchange-Admins"],
      "ADAttributeEditorLevel3": ["DOMAIN\\Exchange-Admins"],
      "CalendarPermissions": ["DOMAIN\\Exchange-Admins"],
      "CalendarPermissionsOnPrem": ["DOMAIN\\Exchange-Admins"],
      "MigrationCheck": ["DOMAIN\\Exchange-Admins", "DOMAIN\\Migration-Team"],
      "MigrationCreate": ["DOMAIN\\Exchange-Admins", "DOMAIN\\Migration-Team"],
      "MigrationManage": ["DOMAIN\\Exchange-Admins"],
      "ConferenceRooms": ["DOMAIN\\Exchange-Admins"],
      "DelegationReport": ["DOMAIN\\Exchange-Admins", "DOMAIN\\IT-Helpdesk"],
      "LicensingUpdates": ["DOMAIN\\Exchange-Admins"],
      "MessageTrace": ["DOMAIN\\Exchange-Admins", "DOMAIN\\IT-Helpdesk"],
      "RecipientLookup": ["DOMAIN\\Exchange-Admins", "DOMAIN\\IT-Helpdesk"],
      "OutOfOffice": ["DOMAIN\\Exchange-Admins"],
      "EmergencyDisable": ["DOMAIN\\Exchange-Admins"],
      "MfaReset": ["DOMAIN\\Exchange-Admins"],
      "NamedLocations": ["DOMAIN\\Exchange-Admins"],
      "DhcpAuthorization": ["DOMAIN\\Exchange-Admins"],
      "EventLog": ["DOMAIN\\Exchange-Admins"],
      "UndoAuditedActions": ["DOMAIN\\Exchange-Admins"]
    }
  },
  "_ServiceNowNote": "When ServiceNow:Enabled is true, source Password from the deployment's PAM/secret-management solution (Delinea Secret Server today) rather than storing a plaintext password in this file - see docs/ProjectConstitution.md Credential Isolation.",
  "ServiceNow": {
    "Enabled": false,
    "InstanceUrl": "https://yourinstance.service-now.com",
    "Username": "api_user",
    "Password": ""
  },
  "Delinea": {
    "SecretServerUrl": "https://secretserver.yourcompany.com/secretserver",
    "CredentialTarget": "Delinea_Client"
  },
  "OnPremExchange": {
    "ServerUri": "http://your-exchange-server.domain.com/PowerShell/"
  },
  "Application": {
    "Name": "IT Admin Portal",
    "PathBase": "/ExchangeAdminWeb",
    "ContactEmail": "exchangeadmin@yourcompany.com"
  },
  "AllowedHosts": "*"
}