Hi,

For that configuration you actually need 2 accounts one local and the other an online account.  The local account is to query local AD and the other to query azure.

If you have to use an access node not in the domain you are backing up, I would suggest using the Exchange Online (Access through azure active directory) configuration. 

https://documentation.commvault.com/11.23/essential/93446_exchange_mailbox_user_mailbox_exchange_online_through_azure_active_directory_environment.html

Thanks,
Chris

I do not know the answer to you direct question, I assume this support is here for some special case. Using this option the Access node must be domain joined, same for Hybrid configuration, and authentication is done against the on-prem domain controllers I assume, before connecting to EXO. 

If you only plan to backup EXO based mailboxes, the best option is to go with Exchange Online (Access Through Azure AD). It also best to configure this support through the Command Center Console (web) vs the Java\CommCell console, since that is where development is focused moving forward.

The CCC has an “Create Exchange Online app” wizard that makes the setup much easier:

Using the Java\CommCell console the steps for setting up EXO support using Azure AD only are here:

Configurations for the Exchange Mailbox Agent User Mailbox Exchange Online(Through Azure Active Directory) Environment (CommCell Console) (commvault.com)