EWS Retirement and Promodag Reports - Impact Assessment

Question:

Does the retirement of EWS from October 2026 onwards require us to make any changes to keep our Promodag working properly?

Answer:

Understanding the Impact

Whether you are affected depends on how you use Promodag Reports. There are two separate points to consider:

1. EWS Permission in Your Entra ID Application

The application registered for Promodag Reports includes the full_access_as_app EWS permission. However, this permission is only needed if you use reports on mailbox content, such as:

• Attachments
• Meetings
• Calendar items
• Public folder content
• Similar mailbox content features

If you never use such reports, this permission can be removed from the application, and the EWS retirement will not affect your Promodag Reports installation.

2. Actual EWS Usage

To determine if EWS is actually being called by Promodag Reports:

1. Navigate to the Microsoft 365 admin center
2. Access the EWS usage report: https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/ews-usage?view=o365-worldwide
3. Check if this report shows activity from Promodag Reports

If the report shows EWS activity from Promodag Reports, you are running mailbox content reports that require EWS, and you are affected by the upcoming retirement.

Our Migration Plan

We are actively rewriting the mailbox content reporting functionality to use Microsoft Graph APIs instead of EWS.

Timeline: We do not have a precise release date yet.

Complexity: The migration is complex because:

• Graph APIs cannot fully replace all EWS functionalities;
• Graph APIs have limitations such as throttling and specific permission requirements;
• Extensive testing is required to ensure feature parity and reliability.

Recommended Actions

To ensure uninterrupted service while we complete the migration, we recommend taking the following preventive measures:

Action 1: Ensure EWSEnabled is Set to True

Run the following PowerShell command to verify or set the EWSEnabled parameter:

This ensures EWS remains active in your tenant.

Action 2: Add Promodag to the AppID Allow List

When Microsoft makes the AppID Allow List available, add the following application to it:

• Default Application Name: Promodag Reports RBAC Application. This name may be different if you created manually from scratch, see How to manually create a custom Promodag app in your Office 365 tenant.
• This will ensure Promodag Reports can continue using EWS until our Graph migration is complete.

Note: Microsoft has not yet released the AppID Allow List feature. We will update this article with detailed instructions once it becomes available.