---
title: Office 365 App Protection configurations
slug: dmg-android/guide/office-365-app-protection-configurations
createdAt: 2026-10-06T07:46:36.966Z
---

Once you register Ivanti EPMM as an Azure app you can create custom configurations for Office 365 apps. App Configurations can be used to specify custom app configurations for Office 365 apps. Configurations can include setting a local encryption scheme for OneDrive, setting Skype parameters, and so on.

This section includes the following topics:

- [Creating Office 365 App Protection configurations](docId:3C1fOtHrtf4H-4EmUn75U)
- [Editing a Office 365 App Protection configuration](docId:3C1fOtHrtf4H-4EmUn75U)
- [Managing Office 365 App Protection configurations](docId:3C1fOtHrtf4H-4EmUn75U)

:::hint{type="info"}
Before using this feature, complete the prerequisites described in the following section: [Prerequisites for using Office 365 App Protection](docId\:dok784PMgUdzhjo-MCdHH)*.*
:::

**Related topics** 

- [Office 365 App Protection overview](docId\:dok784PMgUdzhjo-MCdHH)
- [Office 365 App Protection policies](docId\:uDk07QMhR-M3fOxeUIWsw)
- [Office 365 App Protection user groups](docId\:l3gIjyofdJjvy7D_E-xcZ)
- [Office 365 App Protection reports](docId\:KEF8Xc6blymoOvM5aSUSO)
- [Office 365 App Protection settings](docId:9WQhCNamyIM3zkQreINUV)

## Creating Office 365 App Protection configurations

Configurations use data populated from Azure Active Directory during real-time syncs.

**Procedure**

1. Log in to the Admin Portal.
2. Go to **Services > Microsoft Graph > Configurations > Add**.
3. Add a name (required) and description (optional).
4. Select **Add+** to add one or more key-value pairs.
   The values are strings with no limitations or restrictions.
5. Select **Save** to add the configuration to the list in the configurations table.

## Editing a Office 365 App Protection configuration

Configurations use data populated from Azure Active Directory during real-time syncs.

**Procedure **

1. Log in to the Admin Portal.
2. Go to **Services > Microsoft Graph > Configurations**.
3. Select the name of a configuration you want to edit.
   Use the search field to search by name.
4. Make any necessary changes.
5. Select **Save** to update the configuration edits.

## Managing Office 365 App Protection configurations

You can take any of the following actions on each Office 365 App Protection configuration:

- Assign User Groups
- Assign Apps
- Delete Policies

**Procedure **

1. Log in to the Admin Portal.
2. Go to **Services > Microsoft Graph > Configurations**.
3. Locate a configuration you want to manage and go to the **Actions** column.
   1. Assign user groups to the app protection configuration.
   2. Select the **Assign User Groups **icon.
   3. Search for user groups.
   4. Select one or more user groups to add to the configuration.
   5. Select **Save**.
4. Assign Office 365 apps to the app protection configuration.
   1. Select the **Assign Apps** icon.
   2. Search for apps.
   3. Select one or more apps to add to the configuration.
   4. Select **Save**.
5. Delete an Office 365 App Protection configuration.
   1. Select the **Delete Configuration** icon.
   2. Select **Yes** to confirm deletion of the configuration.

Changes to the configurations take affect after:

- assigning the configuration to a user group.
- a user from the assigned user group logs into an Office 365 app using AAD credentials.