Mail Server Settings

Overview

Mail server settings let you configure how ObserveOps (formerly known as AIOps) sends email notifications, alerts, and scheduled reports. ObserveOps supports two email delivery methods: SMTP for standard mail server connections, and Microsoft Graph API for organizations that use Microsoft 365 and have disabled SMTP AUTH in Exchange Online.

Navigation

Go to Menu. Select System Settings . Then select Mail Server Settings. The mail server settings screen opens.

Select your email provider and fill in the fields for that provider.

---

SMTP

SMTP Configuration

The SMTP tab lets you connect ObserveOps to any standard SMTP mail server. Use this option when your organization sends email through an on-premises mail server or a cloud email provider that supports SMTP AUTH.

Field	Description
SMTP Server	Enter the address of your SMTP server. This is the server responsible for sending outgoing emails.
Use Proxy Server	Enable this option to route SMTP connections through the configured proxy server. Ensure proxy settings are correctly configured in the system.
Security Type	Choose the security type for the SMTP server connection: - None: No encryption is applied to the connection. - SSL: Secure Socket Layer encryption is used for the connection. - TLS: Transport Layer Security encryption is used for the connection. Select the option that matches your email service provider's requirements.
SMTP Server Port	Enter the port number the SMTP server uses. Common SMTP ports are 25, 465, or 587. Check with your email service provider for the correct port.
Authentication Type	Choose the authentication method for the SMTP connection: - Basic: Displays the Authentication Required toggle. Enable it to enter a username and password. - OAuth 2.0: Enter the username and select a credential profile configured for OAuth.
From Email	Enter the email address that appears in the From field on all outgoing notifications and reports.
Authentication Required	Toggle this on to require username and password authentication. This option appears only when you select Basic as the authentication type.
User Name	Enter the username for the SMTP account. This field appears when authentication is required.
Password	Enter the password for the SMTP account. This field appears only when you select Basic as the authentication type.
Credential Profiles	Select an existing credential profile to use for OAuth 2.0 authentication. You can also create a new credential profile directly from this screen using the Create Credential Profile button.

info

See Configuring OAuth with Microsoft Azure for steps to set up OAuth 2.0 authentication with Microsoft Entra.

Click Test to verify the connection to the SMTP server. A successful test confirms that the settings are correct and ObserveOps can send email. Click Save Mail Server Settings to apply the configuration.

Microsoft Graph API

Microsoft Graph API Configuration

The Microsoft Graph API tab lets ObserveOps send email through the Microsoft 365 mail service without using SMTP. Use this option when your organization has disabled SMTP AUTH in Exchange Online. ObserveOps authenticates using the OAuth 2.0 client credentials flow and calls the Microsoft Graph Mail.Send endpoint to deliver messages.

Before you configure this tab, complete the following steps in Microsoft Entra:

• Register an application in your Microsoft Entra tenant.
• Grant the Mail.Send application permission to the registered app.
• Get administrator consent for the Mail.Send permission.
• Create a client secret or upload a certificate for app-only authentication.
• Note the Tenant ID, Application (Client) ID, and your client secret or certificate details.

Field	Description
Azure Tenant ID	Enter the Directory (Tenant) ID from your Microsoft Entra app registration. This identifies your Azure AD tenant.
Application (Client) ID	Enter the Application ID assigned to your registered app in Microsoft Entra.
Authentication Method	Select the method that matches what you configured in Microsoft Entra: - Client Secret: Uses a secret value generated in your app registration. - Certificate: Uses a certificate uploaded to your app registration.
Client Secret	Enter the secret value from your app registration. This field appears only when you select Client Secret as the authentication method.
Certificate Thumbprint	Enter the thumbprint of the uploaded certificate. This field appears only when you select Certificate as the authentication method.
From Address	Enter the full email address of the sender mailbox, for example observeops-alerts@yourdomain.com. This address appears in the From field on all ObserveOps notifications. The mailbox must be a licensed Microsoft 365 mailbox.

Click Send Test Email to verify the connection. Enter a recipient address in the Test Email To field and click Send Test Email. Check the recipient inbox to confirm delivery. A successful test confirms that authentication, permissions, and the sender mailbox are all working correctly. Click Save to apply the configuration.

info

Use Exchange Online Application Access Policy to restrict the registered app to only the sender mailbox. Run this command in Exchange Online PowerShell after registering the app:

New-ApplicationAccessPolicy `
  -AppId "<Your Application (Client) ID>" `
  -PolicyScopeGroupId "<sender-mailbox@yourdomain.com>" `
  -AccessRight RestrictAccess `
  -Description "Restrict ObserveOps Graph API app to the ObserveOps sender mailbox"