Skip to main content
Question

Office 365 Configuration Helper fails with AAD Graph error

  • April 2, 2026
  • 1 reply
  • 16 views

Forum|alt.badge.img+18

Hi all,
 

when registering an Office 365 Exchange app in the Commvault Command Center (version 11.32), we attempted to use the Office 365 Configuration Helper tool.

However, after running the helper, the following error occurs: "Access blocked to AAD Graph API for this application."
 

Although the provided link (https://learn.microsoft.com/en-us/graph/migrate-azure-ad-graph-overview) describes the general API migration, it does not offer specific advice for resolving this within the Commvault tool. We have already tried installing the Microsoft Graph PowerShell SDK (https://learn.microsoft.com/en-us/powershell/microsoftgraph/installation), but the error persists and the configuration tool still fails.
 

Have you had any similar experiences with the Office 365 Configuration Helper tool?

Thanks in advance for sharing your insights!

1 reply

Forum|alt.badge.img+5
  • Vaulter
  • April 3, 2026

Hi ​@drPhil 

Good day!

Yes, this is a issue related to Microsoft's deprecation of the legacy Azure AD Graph API. Microsoft now requires all new app registrations and API calls to use the Microsoft Graph API instead of the older Azure AD Graph API. As a result, attempts to register or configure Office 365 Exchange apps using tools or scripts that still reference the AAD Graph API will fail with errors like "Access blocked to AAD Graph API for this application."

Microsoft has blocked access to the Azure AD Graph API for new applications and is enforcing the use of Microsoft Graph API. 

Register the Azure app manually for Exchange Online directly in the Azure portal, assign the required Microsoft Graph and Exchange Online permissions, and generate the client secret.