Skip to main content
Version: 7.3

Switching Microsoft 365 from EWS to Microsoft Graph

contentACCESS uses EWS to connect to Microsoft 365, but Microsoft has recently decided to shut down EWS access for M365 (starting in October 2026; see the official Microsoft announcement). The replacement of EWS is Microsoft Graph, which contentACCESS now supports for connecting to Microsoft 365 with some limitations. The Graph access is currently in preview (Beta).

In this section, you can find information about the changes and limitations imposed by Microsoft Graph:

✓ Entra ID (update or create it)
contentACCESS uses an Entra ID app to access Microsoft Graph. This app is similar to the app used for EWS modern authentication.

If you already have an Entra ID app registered for EWS, this app can be reused by extending the list of permissions. The following Graph permissions (application level) need to be added to the app:

  • Mail.ReadWrite
  • Mail.Send
  • MailboxFolder.ReadWrite.All
  • MailboxItem.ImportExport.All
  • MailboxItem.Read.All
  • MailboxSettings.Read
  • Calendars.ReadWrite
  • Contacts.ReadWrite
  • Tasks.ReadWrite.All

If you do not have an Entra ID app yet, create one by following the Microsoft Entra ID app registration documentation. The app already includes all the necessary permissions.

✓ Update Exchange connections (requested changes)
The switch from EWS to Graph does not happen automatically. Edit each M365 connection manually and change "M365 with EWS" to "M365 with Graph".

It can be found in these 2 sections:

  • Email archive - System settings
  • System - Notifications (if the notification was using EWS instead of SMTP)

✓ In-place archives (limitation)
Microsoft Graph does not yet provide access to in-place archive mailboxes. Until this is provided by Microsoft, contentACCESS is not able to archive in-place archive mailboxes with Graph.

✓ Public folders (limitation)
Microsoft Graph does not provide access to public folders and most likely will not provide access in the future. Microsoft is pushing customers away from public folders and has no plans to support them further. contentACCESS is not able to archive public folders with Graph.

✓ Restore and recovery of Calendar items (limitation)
Due to a known limitation in Microsoft Graph, it is currently not possible to create a calendar item with full fidelity. The recovery of calendar items is not working at the moment. We are working on a solution or workaround to provide this functionality.

✓ Calendar, contact and task items in mail folders (limitation) Outlook and EWS allowed users to store calendar, contact and task items inside a mail folder. These items are no longer accessible by Graph; Graph can only access calendar items inside a calendar, contacts in the contacts folder, and tasks in task folders.

✓ Limitations in folder permission synchronization
Microsoft Graph has limited support for folder-level permissions. The permissions are accessible, but only the display name of the objects is available. This might lead to limited functionality if two users share the same display name. Some shared folders might not show up in the contentACCESS portal for certain users.