# Forensic Email Collector 4.0.287 Release Notes **URL:** \ **Category:** Releases\ **Tags:** release-notes\ **Created:** [December 13, 2024, 11:32pm UTC](https://community.metaspike.com/t/forensic-email-collector-4-0-287-release-notes/2232 "2024-12-13T23:32:19Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![agungor](https://community-cdn.metaspike.com/user_avatar/community.metaspike.com/agungor/32/719_2.png) [@agungor](https://community.metaspike.com/u/agungor)\ **Post date:** [December 13, 2024, 11:32pm UTC](https://community.metaspike.com/t/forensic-email-collector-4-0-287-release-notes/2232/1 "2024-12-13T23:32:19Z")
We’ve just released a new FEC version with a major new feature: a new enterprise authentication method! 😁 Each time we released a new enterprise authentication method in the past, such as delegate access, impersonation, or domain-wide delegation, it opened the doors to numerous possibilities for preserving evidence from organizations. I believe this will be no different. Let’s dive in! # App-only Authentication for M365 FEC now supports App-only Authentication when targeting M365 accounts—both via Exchange Web Services (EWS) and Microsoft Graph API. In a nutshell, Microsoft defines App-only access as follows: > _When an application directly accesses a resource, like Microsoft Graph, its access isn’t limited to the files or operations available to any single user. The app calls APIs directly using its own identity, and a user or app with admin rights must authorize it to access the resources. This scenario is application-only access._ You can read more about this from Microsoft here: > **[Microsoft identity platform app-only access scenario - Microsoft identity...](https://learn.microsoft.com/en-us/entra/identity-platform/app-only-access-primer)** > > Learn about when and how to use app-only access in the Microsoft identity platform endpoint. Here are the primary use cases for App-only Authentication in the context of FEC: ## ApplicationImpersonation Role Being Retired Microsoft announced that they are retiring the ApplicationImpersonation role in M365. Their plan is to completely remove the role after February 2025 ([source](https://techcommunity.microsoft.com/blog/exchange/retirement-of-rbac-application-impersonation-in-exchange-online/4062671)). App-only Authentication will replace Impersonation in FEC when targeting M365, and you will be able to continue to perform batch acquisitions against M365 in enterprise scenarios. ## Overcoming Lack of Impersonation Support in Graph API Unlike EWS, Microsoft Graph API does not support Impersonation. App-only Authentication fills this gap and allows acquisitions via Graph API while being authenticated at the tenant level. This way, Graph API is moving one step closer to being able to replace EWS. This will also come in handy for some Graph-related new features we are planning to release in 2025. 😉 ## Granular Access Control When using App-only Authentication, you can leverage Role Based Access Control (RBAC) to achieve granular, resource-scoped access control. For instance, the target organization can provide access to only certain administrative units or mailboxes rather than the entire organization. 💪🏻 You can learn more about how to set things up in our new support document here: > **[Using App-only Authentication with M365 - Metaspike Knowledge Base](https://docs.metaspike.com/article/84-using-app-level-authentication-m365)** > > App-only authentication allows Forensic Email Collector (FEC) to authenticate against M365 at the tenant level. This workflow is similar to using Impersonation, The installer is 🔒 [here](https://community.metaspike.com/t/latest-fec-download-links/14)when you are ready! ---
**Author:** ![agungor](https://community-cdn.metaspike.com/user_avatar/community.metaspike.com/agungor/32/719_2.png) [@agungor](https://community.metaspike.com/u/agungor)\ **Post date:** [May 5, 2025, 7:56pm UTC](https://community.metaspike.com/t/forensic-email-collector-4-0-287-release-notes/2232/3 "2025-05-05T19:56:39Z")
Closed on May 5, 2025, 7:56pm UTC