How to create the Radar for Office 365 service account

This article explains how to create a Read-Only Administrator account in Office 365 for use with Radar for Office 365 Reports. This is for use with our Manual signup process and it is important that you complete all the steps. It is recommended that you use the PowerShell method, as this contains less steps, however at the bottom of this article you can also find some steps on how to do this via the Admin Portal.
Your organization will not be charged by Microsoft for this account as it does not require an Office 365 licence. More information about the rights and permissions this account requires can be found in our How It Works section.

Connecting to Office 365 using PowerShell

Before we begin, you need to install the “Microsoft Online Service Module” onto your machine. The “Set up your computer to use Powershell” section of our Connecting to Office 365 using PowerShell blog shows you how to do this.
Now open up Windows PowerShell and Copy & Paste in the following commands to connect to Office 365.
Please enter the username and password of an Office 365 Administrator account when prompted.

$Office365credentials = Get-Credential
Import-Module MSOnline
Connect-MsolService -Credential $Office365credentials
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri “https://ps.outlook.com/powershell/” -Credential $Office365credentials -Authentication Basic -AllowRedirection
Import-PSSession $Session

Creating the Service Account

Now that you are connected to Office 365 in PowerShell, we can create the Service account.
Modify the line below and set the company.onmicrosoft.com part to match your own Office 365 .onmicrosoft.com domain and replace the password with a secure password of your own. We recommend a password of 10 characters or more that includes a mixture of capital and lower case letters, numbers and special characters.

New-MSolUser -DisplayName "Service Account for Radar Reporting" -UserPrincipalName "RadarReports@company.onmicrosoft.com" -Password "Password123" -PasswordNeverExpires $true -ForceChangePassword $false

Next, we need to add our new account to the ‘View-Only Organization Management’ group and the ‘Service Support Administrator’ group. You can do this by copying and pasting the following 2 lines into the PowerShell window.
Note: Remember to set the company.onmicrosoft.com part to match your Office 365 domain name.

Add-RoleGroupMember -identity "View-Only Organization Management" -member RadarReports@company.onmicrosoft.com

Add-MSOLRoleMember –RoleName "Service Support Administrator" –RoleMemberEmailAddress RadarReports@company.onmicrosoft.com

Note: you will not receive any confirmation if the commands are successful.

Creating the Service Account via the Admin Portal

You can also create the service account via the Admin Portal, however you would still need to run a final PowerShell cmdlet to ensure that the password does not expire.

1. On the Admin home page, go to Users > Add a User.
2. Enter a Display Name, for example ‘Service Account for Radar Reports’.
3. Enter a User Name, for example ‘RadarReports’.
4. Ensure that the domain is company.onmicrosoft.com.
5. Select “Let me create a password” and enter a ‘strong’ one.
6. Ensure “Make this user change their password when they first log in” is NOT ticket
7. In the roles section, select “Customized administrator” and then “Service Administrator”

Note: Do NOT assign a product license – leave everything as default and click the “Add” button.

Once the user is created, navigate to the Exchange Admin Portal by going to Admin Centers then Exchange in the left navigation menu.

1. Navigate to Permissions > Admin Roles.
2. Select the ‘View-Only Organization Management’ role and then click the ‘Edit‘ button at the top of the list (the pencil icon).
3. In the newly popped up window, scroll down to Members and add the newly created service account as a member.

Finally, in PowerShell, run the below cmdlet so that the password does not expire:

Set-MsolUser -UserPrincipalName RadarReports@company.onmicrosoft.com -PasswordNeverExpires $true

 
The service account has now been created and you can complete the manual signup process.
If you have any problems with the account creation or wish to speak to us you can log a ticket by emailing your question to support@quadrotech-it.com.