CUSTOMER DEMO WORKBENCH

Microsoft 365
Developer Toolkit

A growing collection of focused developer tools for exploring and demonstrating Microsoft 365 APIs with customer-controlled credentials.

03tools available

TOOL CATALOG

Choose a tool

Each tool is self-contained and uses credentials supplied for the current browser session.

01 MICROSOFT 365 · MANAGEMENT API Activity Feed Explorer Manage audit subscriptions, discover available content, and inspect unified audit events. Open tool → 02 EXCHANGE ONLINE · MICROSOFT GRAPH Message Trace Explorer Search delivery records, inspect recipient journeys, and export trace results. Open tool → 03 EXPERIMENTAL · MICROSOFT GRAPH Mailbox Item Transfer Explore folders and items, then export or import full-fidelity Exchange mailbox item streams. Open experiment →

Export and import full-fidelity Exchange mailbox items through the Microsoft Graph mailbox import and export APIs.

EXPERIMENTAL / BEFORE YOU BEGINConfigure mailbox API permissionsView instructions
  1. Add Microsoft Graph application permissions MailboxFolder.Read.All, MailboxItem.Read.All, MailboxItem.ImportExport.All, and Mail.Read.
  2. Grant tenant-wide admin consent. Use a dedicated test app and test mailbox while evaluating this experimental tool.
  3. Connect below using the app-only credentials. Export supports at most 20 item IDs per request.
  4. Exported data is an opaque full-fidelity FastTransfer stream. It is intended only for import and cannot be edited or inspected.
  5. This API is not designed for mailbox backup and restore. Use Microsoft 365 Backup for production backup scenarios.
Open Microsoft's API overview ↗

01 / CONNECT

Graph application credentials

OR
Requires mailbox application permissions and admin consent.

02 / DISCOVER

Mailbox folders and items

Folders

Connect and enter a mailbox ID.

Items 0 selected

Choose a folder.

03 / EXPORT

Full-fidelity item package

Downloads a JSON package containing up to 20 opaque FastTransfer streams, item IDs, and change keys.

04 / IMPORT

Restore an exported item

Destination folders None selected

Enter the destination mailbox and browse its folders.

Create mode imports the first item in the selected package.

Explore unified audit content through the Office 365 Management Activity API using customer-owned app credentials.

IMPORTANT / BEFORE YOU BEGINSet up the Management API applicationView instructions
  1. Register an Entra application and record its tenant and client IDs.
  2. Add Office 365 Management APIs → Application permissions → ActivityFeed.Read (Read activity data for your organization). This is the required permission for this tool.
  3. Add ActivityFeed.ReadDlp only if sensitive DLP details are required.
  4. Do not add ServiceHealth.Read for this tool. That permission belonged to the separate legacy Service Communications API, which Microsoft has retired in favor of the Microsoft Graph service health API.
  5. Grant tenant-wide admin consent and ensure Microsoft Purview unified auditing is enabled. Unified auditing is mandatory before Activity API data can be accessed.
  6. Create a certificate (recommended) or short-lived client secret and use the secret value, not its ID.
Open Microsoft's Management API guide ↗

01 / CONNECT

Customer credentials

OR
Requires ActivityFeed.Read application permission and admin consent.

02 / SUBSCRIPTIONS

Audit feeds

Connect to inspect subscriptions.

03 / CONTENT

Available audit content

Explore Exchange Online delivery paths through Microsoft Graph v1.0 using customer-controlled app credentials.

IMPORTANT / BEFORE YOU BEGIN Set up the customer's Microsoft Entra application View instructions
  1. Register an application. In the Microsoft Entra admin center, create an app registration in the customer tenant and record its Application (client) ID and Directory (tenant) ID.
  2. Add the Graph application permission. Open API permissions → Add a permission → Microsoft Graph → Application permissions, then add ExchangeMessageTrace.Read.All.
  3. Grant admin consent. A tenant administrator must select Grant admin consent. Delegated permission is not used by this tool.
  4. Create a credential. Under Certificates & secrets, upload a certificate (recommended) or create a short-lived client secret. Copy the secret value immediately—not its secret ID—because Entra shows the value only once.
  5. Provision the Microsoft Message Trace service principal. Run the following once as an administrator, then allow several hours for provisioning: 
    Connect-MgGraph -Scopes "Application.ReadWrite.All"
New-MgServicePrincipal -AppId "8bd644d1-64a1-4d4b-ae52-2e0cbf64e373"
Credential handling: Enter the client secret value or upload the PFX below. Credentials are held only in this browser session; they are not saved by the application. Prefer a certificate for anything beyond a short demonstration.
Open Microsoft's Message Trace onboarding guide ↗

01 / CONNECT

Customer credentials

App-only authentication follows the Microsoft Message Trace onboarding guide.

OR
A certificate is recommended.

02 / SEARCH

Trace messages

Advanced filters
The generated Graph request appears here.

03 / RESULTS

Delivery overview 0

ReceivedSenderRecipientSubjectStatusSize
Connect and run a trace to see messages.

MESSAGE JOURNEY

Trace details

AUDIT EVENT

Event details