Microsoft Graph Mail Single User

Microsoft Graph grants Cortex XSOAR authorized access to a user's Microsoft Outlook mail data in a personal account or organization account.

Email · Microsoft Graph Mail

Configuration parameters

  • creds_auth_id —
  • creds_refresh_token —
  • creds_enc_key —
  • auth_id — ID or Client ID
  • refresh_token — Token or Tenant ID
  • enc_key — Key or Client Secret
  • creds_certificate — Certificate Thumbprint (optional for self-deployed Azure app)
  • certificate_thumbprint — Certificate Thumbprint (optional for self-deployed Azure app)
  • private_key — Private Key
  • creds_auth_code —
  • auth_code — Authorization code (required for self-deployed Azure app)
  • redirect_uri — Application redirect URI (required for self-deployed Azure app)
  • self_deployed — Use a self-deployed Azure application
  • use_managed_identities — Use Azure Managed Identities
  • managed_identities_client_id —
  • isFetch — Fetch incidents
  • mailbox_to_fetch — Email address to associate for this integration.
  • folder_to_fetch — Name of the folder from which to fetch incidents (supports Folder ID and sub-folders e.g., Inbox/Phishing)
  • first_fetch — First fetch timestamp (<number> <time unit>, e.g., 12 hours, 7 days)
  • fetch_limit — Maximum number of emails to pull per fetch
  • incidentType — Incident type
  • display_full_email_body — Display full email body
  • fetch_html_formatting — Fetch emails in HTML format
  • mark_fetched_read — Mark fetched emails as read
  • incidentFetchInterval — Incidents Fetch Interval
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • legacy_name — Use legacy attachment name

Commands (21)

  • msgraph-email-security-send-email-to-recipients-office-365-quick-action

    Sends an email using Microsoft Graph.

  • msgraph-mail-auth-reset

    Run this command if for some reason you need to rerun the authentication process.

  • msgraph-mail-create-draft

    Creates a draft message in the specified user's mailbox.

  • msgraph-mail-create-folder

    Creates a new folder under the specified folder (parent).

  • msgraph-mail-delete-rule

    Delete a specific email rule by ID for a user's mailbox using Microsoft Graph API.

  • msgraph-mail-generate-login-url

    Generate the login url used for Authorization code flow.

  • msgraph-mail-get-attachment

    Gets an attachment from the email.

  • msgraph-mail-get-email-as-eml

    Retrieves an email message by message ID and uploads the content as an EML file.

  • msgraph-mail-get-rule

    Get details of a specific email rule by ID for a user's mailbox using Microsoft Graph API.

  • msgraph-mail-list-attachments

    Lists all attachments of an email.

  • msgraph-mail-list-child-folders

    Returns the folder list under the specified folder.

  • msgraph-mail-list-emails

    Gets the properties of returned emails. Typically shows partial results, use the "page_size" and "pages_to_pull" arguments to get all results.

  • msgraph-mail-list-folders

    Returns the mail folder list directly under the root folder.

  • msgraph-mail-list-rules

    List email rules for a user's mailbox using Microsoft Graph API.

  • msgraph-mail-move-email

    Move a message to another folder. This operation creates a new copy of the message in the destination folder and deletes the original message. As a result, the message ID changes.

  • msgraph-mail-reply-to

    The replies to the recipients of a message.

  • msgraph-mail-send-draft

    Sends a draft email using Microsoft Graph.

  • msgraph-mail-test

    Tests connectivity of the email.

  • msgraph-update-email-status

    Update the status of an email to read / unread.

  • reply-mail

    Replies to an email using Graph Mail Single User.

  • send-mail

    Sends an email using Microsoft Graph.