Skip to main content

How can we help you?

Search

Action Required: Security Upgrade and Integration Update for Microsoft 365

Microsoft is changing how third-party apps connect to Microsoft 365, which means your ContactMonkey integration needs two updates before October 1, 2026. This article explains what is changing, who needs to act, and where to find step-by-step instructions for each update.

What's Changing

ContactMonkey is making two updates to align with Microsoft's modern security and API standards:

  1. Microsoft Graph permission scope reduction — A security improvement that narrows ContactMonkey's access to your Microsoft 365 directory to only the data needed for distribution list expansion.
  2. Exchange Web Services (EWS) to Exchange Online Admin API migration — A required migration before Microsoft retires EWS on October 1, 2026.

Together, these updates reduce data access scope and ensure features like Dynamic Distribution List expansion continue to work reliably. Once complete, any email address entered in the To field will continue to send successfully after Microsoft retires its legacy systems.

For more information on API permissions, click here: API Permissions and Utility Account Access Explained

Who Needs to Take Action

These updates require changes from two roles:

  • Your IT administrator or Microsoft 365 Global Admin authorizes the updates inside your Microsoft 365 environment.
  • Your ContactMonkey admin reconnects the integration in Settings → Integrations after the IT-side steps are complete.

Forward this article to your IT team if you do not have Microsoft 365 admin access yourself.

Update 1: Microsoft Graph Permission Scope Reduction

ContactMonkey is moving from broad Microsoft Graph permissions to a targeted, minimal-access model. After this update, ContactMonkey will only access the specific directory data needed for distribution list expansion.

For step-by-step instructions, see Migrating to the GroupMember.Read.All Permission for Microsoft Graph.

Update 2: EWS to Exchange Online Admin API Migration

Microsoft is retiring Exchange Web Services on October 1, 2026. To prevent disruption to Dynamic Distribution List expansion and related features, your IT team must authorize a new ContactMonkey app registration in your Microsoft 365 environment.

For step-by-step instructions, see Migrating from EWS to Exchange Online Admin API.

After the Updates

Once your IT team finishes both updates, a ContactMonkey admin needs to reconnect the affected integrations:

  1. In ContactMonkey, go to Settings → Integrations
  2. Reconnect the Microsoft 365 integration
  3. Send a test email to confirm distribution list expansion works as expected

The ContactMonkey Technical Support team can walk you through the reconnection if needed.

Get Help

If you have questions or want hands-on support, reply to the notification email or contact the ContactMonkey Technical Support Team at support+ews@contactmonkey.com.

Related articles