Microsoft is changing how third-party apps connect to Microsoft 365, which means your ContactMonkey integration needs two updates before October 1, 2026. This article explains what is changing, who needs to act, and where to find step-by-step instructions for each update.
What's Changing
ContactMonkey is making two updates to align with Microsoft's modern security and API standards:
- Microsoft Graph permission scope reduction — A security improvement that narrows ContactMonkey's access to your Microsoft 365 directory to only the data needed for distribution list expansion.
- Exchange Web Services (EWS) to Exchange Online Admin API migration — A required migration before Microsoft retires EWS on October 1, 2026.
Together, these updates reduce data access scope and ensure features like Dynamic Distribution List expansion continue to work reliably. Once complete, any email address entered in the To field will continue to send successfully after Microsoft retires its legacy systems.
For more information on API permissions, click here: API Permissions and Utility Account Access Explained
Who Needs to Take Action
These updates require changes from two roles:
- Your IT administrator or Microsoft 365 Global Admin authorizes the updates inside your Microsoft 365 environment.
- Your ContactMonkey admin reconnects the integration in Settings → Integrations after the IT-side steps are complete.
Forward this article to your IT team if you do not have Microsoft 365 admin access yourself.
Update 1: Microsoft Graph Permission Scope Reduction
ContactMonkey is moving from broad Microsoft Graph permissions to a targeted, minimal-access model. After this update, ContactMonkey will only access the specific directory data needed for distribution list expansion.
For step-by-step instructions, see Migrating to the GroupMember.Read.All Permission for Microsoft Graph.
Update 2: EWS to Exchange Online Admin API Migration
Microsoft is retiring Exchange Web Services on October 1, 2026. To prevent disruption to Dynamic Distribution List expansion and related features, your IT team must authorize a new ContactMonkey app registration in your Microsoft 365 environment.
For step-by-step instructions, see Migrating from EWS to Exchange Online Admin API.
After the Updates
Once your IT team finishes both updates, a ContactMonkey admin needs to reconnect the affected integrations:
- In ContactMonkey, go to Settings → Integrations
- Reconnect the Microsoft 365 integration
- Send a test email to confirm distribution list expansion works as expected
The ContactMonkey Technical Support team can walk you through the reconnection if needed.
Get Help
If you have questions or want hands-on support, reply to the notification email or contact the ContactMonkey Technical Support Team at support+ews@contactmonkey.com.