Microsoft Graph Email Integration Issues

We’re seeing and issue with Microsoft 365 email accounts with Microsoft Graph API

Initially, WHD was requesting EWS permissions instead of Graph API permissions. We found this was due to missing parameters in our configuration and corrected them by adding the following:

JAVA_OPTS="-DExchangeServiceURL=">outlook.office365.com/"
JAVA_OPTS="-DAzureTokenURL=">login.microsoftonline.com/"
JAVA_OPTS="-DAzureAuthorizationURL=">login.microsoftonline.com/"
JAVA_OPTS="-DIsGcchAzureAccount=true"
JAVA_OPTS="-DAzureAuthorizationScope=offline_access%20 ">graph.microsoft.com/.default"

After this change, WHD started requesting Graph API permissions correctly.

Everything is working in terms of ticket creation, but we’ve noticed unusual behavior with how emails are handled after being processed:

With EWS permissions, processed emails are soft deleted (moved to the Deleted Items folder).
With Graph API permissions, processed emails are hard deleted (removed completely from the mailbox).

We’ve tested this across different WHD instances and tenants, and the behavior is consistent. Microsoft 365 retention policies are not a factor, since the same mailbox behaves differently depending on whether WHD is using EWS or Graph API.

Has anyone else experienced this issue? Does anyone know of a configuration tweak or fix that makes Graph behave like EWS (move to Deleted Items instead of permanently deleting)?

I am working with SW support as well. According to them, they have not heard of similar issue.

Find more posts tagged with

whd settings

WHD Email

whd

graph api

Accepted answers

All comments

pabely

Hi @navco_loop1 ,

This is more like a MS issue rather than WHD where the API Graph may not support the expunge like EWS did.

What WHD version and can you share the permissions you have in Entra as the SW documentation is contradicting.

navco_loop1

We are now on the latest release. But we started to notice this on v12.8.6

Here is the list of permissions which I am seeing on SolarWinds documentation

pabely

The middle "mail send" looks incorrect to me. Are you using one Registered App to Send & Receive from same mailbox? I tend to have separate registrations even if using same Mailbox.

navco_loop1

Yeah, same one. I too thought it could be fishy, but according to the SW docs, it should be applications instead of delegated. Outgoing emails would not work if this was set to delegated.