Error creating service account for online exchange quarantine in Kaspersky Security for Microsoft Office 365

[JR Acción Informática]

 

I have tried to create a service account for the Exchange Online quarantine both manually and automatically, but it always gives me this error "the provided credentials are invalid or the account does not have the security administrator role"

[FatihDemir]

Hi,

Do you have this role?

To check go to https://protection.office.com/permissions link. Click “Security Administrator” role and click “Members”. 

If you are not a member of the group, you can add yourself as a member. Then try to create service account again. (It may take some time for the role to take effect.)

 

[JR Acción Informática]

Hi FatihDemir

Thank you very much for your answer. I’ve verified that I have the role of security administrator. Best Regards.

 

 

[FatihDemir]

Hi again,

You also need ApplicationImpersonation and Mailbox Search roles. Have you assigned these roles?

Please see article:

https://help.kaspersky.com/KS4MO365/1.0/en-US/143134.htm

Thanks.

[JR Acción Informática]

Hello again FatihDemir. I have this roles applied to the user account created for synchronization, but it keeps giving error. The problem I have seen may be caused because in our organization all administrator users automatically have multi-factor authentication by default even if it is not activated in the portal.

Thanks.

[FatihDemir]

Hi,

Maybe there is a policy for requiring mfa for accounts with privileged directory roles under Azure Active Directory > Security > Conditional Access Policies. 

Can you check it?