AnywhereNow Dialogue Cloud Microsoft Entra ID Enterprise Applications

Warning

The description in this article is not for creating new UCC A Unified Contact Center, or UCC, is a queue of interactions (voice, email, IM, etc.) that are handled by Agents. Each UCC has its own settings, IVR menus and Agents. Agents can belong to one or several UCCs and can have multiple skills (competencies). A UCC can be visualized as a contact center “micro service”. Customers can utilize one UCC (e.g. a global helpdesk), a few UCC’s (e.g. for each department or regional office) or hundreds of UCC’s (e.g. for each bed at a hospital). They are interconnected and can all be managed from one central location. sites, only for granting consent to access Dialogue Cloud for sites you should have already created.

For creating new AnywhereNow UCC Sites you can use your own created Microsoft Entra ID Formerly known as Azure Active Directory (or Azure AD, or AAD) App and certificate. Please refer to the steps on:
Creating a OneUCC Site using PnP.PowerShell

Microsoft Entra ID Formerly known as Azure Active Directory (or Azure AD, or AAD) App-Only is Microsoft's preferred and soon only model to grant an application access to SharePoint Online. This article describes the steps that are required, after you have created your SharePoint UCC Sites, to enable this authentication method for AnywhereNow Dialogue Cloud to access your SharePoint Online.

Note

As of DC2025.01 we will be providing support for Azure Secure Vault services (configurable through OnePortal Formerly known as Partner Portal. A redesigned web portal for managing Dialogue Cloud deployments.) to allow storage of authentication credentials more securely. We will leverage this same Enterprise Application as an access consent to your selected Secure Vaults. Also see: Dialogue Cloud Secure Vault

Summary

Authentication consists of the following three steps:

Grant consent to a regional AnywhereNow Dialogue Cloud Microsoft Entra ID Enterprise Application.
Set permissions for this consented Enterprise App for all your UCC SharePoint Sites (PowerShell script available).
Have this new authentication method applied to your UCCs (OnePortal request).

Detailed Steps

Step 2: Configure permissions to selected SharePoint Site Collections

Once consent is granted to the Enterprise Application for your Microsoft 365 tenant, the Enterprise Application still requires permissions to the SharePoint sites (previously known as Site Collections) that are used by your AnywhereNow UCCs.

It is essential to grant full control permissions in order to allow AnywhereNow to perform all required operations, such as retrieving settings, uploading voicemails and recordings, etc.

Note

Please note that Microsoft Graph Explorer uses Delegated Permissions. It is therefore essential for the administrator executing the requests to have Site Collection Administrator permissions to the Site Collection used by Anywhere365.

There are two ways to grant these permissions.

1. Using a convenient PowerShell script (preferred and advised):

For a script which eases the below steps for multiple simultaneously created UCC sites see our separate instruction page on:
Granting permission to Multiple Sites - PowerShell Script

2. To manually configure SharePoint Site Collection permissions

the manual steps (25 steps) to be taken using Microsoft Graph Explorer.

Open the Microsoft Graph Explorer in your browser (https://developer.microsoft.com/en-us/graph/graph-explorer)
Click the Sign in button and sign in using a Microsoft 365 administrator account (Global Administrator, Application Administrator or Cloud Application Administrator) that has Site Collection Administrator permissions for the Site Collections used by AnywhereNow.
If this is the first time you sign in to Graph Explorer, you will be prompted to accept the requested permissions. Select Accept to continue.

After successfully signing in, your name will appear in the bar.

In the Query Builder, select Modify permissions (Preview).
In the blue drop down menu, change GET to POST (it will turn from blue to green).
Select the Open the permissions panel.
Using the List (Sites > Sites.FullControl.All) or the search field, select Sites.FullControl.All and click Consent at the bottom of the pane.
If these permissions have not yet been granted to Graph Explorer, the Permissions requested screen will appear. Select Accept to the requested permissions.
The permissions panel will now that Sites.FullControl.All has been consented.
Close the Permissions pane.
In the drop down menu, change POST back to GET. and change the value for the hyperlink from

https://graph.microsoft.com/v1.0/me

to

https://graph.microsoft.com/v1.0/sites/<tenantname>.sharepoint.com:/<sites>/<sitecollectionname>

Note

There is a " : "(colon) between the host name and the relative path to the site collection.
Select Run query to request the details from this specific SharePoint Site Collection.
From the response collect the SharePoint Site Collection id (the GUID GUID stands for Globally Unique Identifier (format is always like 2ed153b4-f632-4766-b846-5b2a769b36d1) and is a pseudo random number used in software applications that is assumed to be unique. The total number of unique keys (2<sup>128</sup> of 3.4028×10<sup>38</sup>) is very large and the probability of the creating the same GUID twice is very small, though not 100% guaranteed. The term GUID is generally used by developers working with Microsoft technologies, while UUID is used everywhere else. of the middle section of the id; between the two commas).
In the query builder replace the host name and relative path to the site collection with the SharePoint Site Collection id and select Run query again. You should get the same as in the previous query.
Compose a new query to grant the Microsoft Entra ID Application write permissions to this SharePoint Site Collection, by changing the value of the drop down menu from to POST and by adding '/permissions' to the end of the hyperlink.
Click Request body.

Supply below request body (matching the regional Microsoft Entra ID Application that you want to grant access) in the field that opens.

EMEA-WEU:

Copy

Request Body

{"roles": ["write"],"grantedToIdentities": [{"application": {"id": "18efff03-033a-4f27-beb6-ee7d4a6a4fab","displayName": "Anywhere365 - EMEA-WEU"}}]}

EMEA-GWC

Copy

Request Body

{"roles": ["write"],"grantedToIdentities": [{"application": {"id": "b087e5fb-3463-46b7-a74d-047a9dee095d","displayName": "Anywhere365 - EMEA-GWC"}}]}

EMEA-NEU

Copy

Request Body

{"roles": ["write"],"grantedToIdentities": [{"application": {"id": "103e3a4b-b13e-47a8-b998-d496e7f9fa5a","displayName": "Anywhere365 - EMEA-NEU"}}]}

NORA-CUS:

Copy

Request Body

{"roles": ["write"],"grantedToIdentities": [{"application": {"id": "ab03865a-8f0c-435e-bcee-55d98f72c391","displayName": "Anywhere365 - NORA-CUS"}}]}

NORA-EU2:

Copy

Request Body

{"roles": ["write"],"grantedToIdentities": [{"application": {"id": "5dfb6af5-9d1a-471f-b9ee-29c0ba334470","displayName": "Anywhere365 - NORA-EU2"}}]}

APAC-SEA:

Copy

Request Body

{"roles": ["write"],"grantedToIdentities": [{"application": {"id": "108437ec-1388-43b4-b87c-2f0f7c40b1c9","displayName": "Anywhere365 - APAC-SEA"}}]}

APAC-AUE:

Copy

Request Body

{"roles": ["write"],"grantedToIdentities": [{"application": {"id": "b69d533f-c413-4df6-877d-f3a74a9cfd18","displayName": "Anywhere365 - APAC-AUE"}}]}

Select Run query.
If the result indicates the permissions is created, the Microsoft Entra ID Application now has write permissions to the selected SharePoint Site Collection.
Finally, these write permissions should be upgraded to full control permissions. To do this, collect the permission id from the response of the latest query.
Build the latest query by changing the value of the drop down menu from POST to PATCH and adding the permissions id to the end of the hyperlink.

Note

Don't forget to include the " / " (forward slash) between permissions and the permissions id.
Supply the request body as below and select Run query.
If the response is OK and the Response Preview shows the role 'fullcontrol' the patch was successful and AnywhereNow should have permissions to this SharePoint Site Collection.
Take a screenshot of this result to share with your AnywhereNow contact (Professional Service Engineer during project delivery or through an AnywhereNow Support ticket for an operational platform).
If AnywhereNow is setup for multiple SharePoint UCC Sites, please go back to step 13 and follow all subsequent steps for each SharePoint Site.

AnywhereNow Dialogue Cloud Microsoft Entra ID Enterprise Applications

Summary

Detailed Steps

To grant consent to the Microsoft Entra ID Enterprise Application

1. Using a convenient PowerShell script (preferred and advised):

2. To manually configure SharePoint Site Collection permissions

Apply this new Authentication method to your UCC nodes