> ## Documentation Index
> Fetch the complete documentation index at: https://docs.phishy.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Configuration

## XML ADD-IN Configuration

### Activating Delete Feature

##### Register an APP in Azure AD

* Microsoft Entra ID -> App Registrations || search for App Registrations

<img src="https://mintcdn.com/phishy-2be9d018/hNRZ2VKV0Q4HIPgE/static/img/incident-response/configuration/app-registrations.png?fit=max&auto=format&n=hNRZ2VKV0Q4HIPgE&q=85&s=c96864cc43cad50e78cd65e1a1cdd443" alt="Reported Mail List" width="524" height="165" data-path="static/img/incident-response/configuration/app-registrations.png" />

* Create an New Registration in App Registrations

* Fill out the Register Options As Below and Create

* In Overview You will need
  * Application (client) Id
  * Directory (tenant) Id

<img src="https://mintcdn.com/phishy-2be9d018/hNRZ2VKV0Q4HIPgE/static/img/incident-response/configuration/ids.png?fit=max&auto=format&n=hNRZ2VKV0Q4HIPgE&q=85&s=6ba7ee4b47482bcedabc549272192115" alt="Reported Mail Summary" width="1600" height="723" data-path="static/img/incident-response/configuration/ids.png" />

In Certificates & Secrets tab, Create a new client secret. Value will be shown only the first time you create it so we advise you to write down the value because you will need this.

<img src="https://mintcdn.com/phishy-2be9d018/hNRZ2VKV0Q4HIPgE/static/img/incident-response/configuration/value.png?fit=max&auto=format&n=hNRZ2VKV0Q4HIPgE&q=85&s=9f1a34860e2ca6326b1a706458cb8819" alt="Reported Mail Details Bottom" width="1408" height="737" data-path="static/img/incident-response/configuration/value.png" />

* Lastly In API Permissions tab, Add a permission and chose
  * Microsoft Graph -> Application Permission
    * User.Read.All
    * Mail.ReadWrite
  * Click Add Permissions
  * Click ✓ Grant admin consent for “Your Company”
  * After all these steps it should look like the image below

<img src="https://mintcdn.com/phishy-2be9d018/hNRZ2VKV0Q4HIPgE/static/img/incident-response/configuration/cmp.png?fit=max&auto=format&n=hNRZ2VKV0Q4HIPgE&q=85&s=290088841d6f2856d71e9d37b432fcbf" alt="Reported Mail Details Bottom" width="1344" height="696" data-path="static/img/incident-response/configuration/cmp.png" />

### Enable Deleting In Phishy UI

* In Phishy UI Go To: Incident Response -> Settings

<img src="https://mintcdn.com/phishy-2be9d018/hNRZ2VKV0Q4HIPgE/static/img/incident-response/configuration/settings.png?fit=max&auto=format&n=hNRZ2VKV0Q4HIPgE&q=85&s=594e7adaf2dfadf54edc3dd2d6b37ce9" alt="Reported Mail Details Bottom" width="1254" height="175" data-path="static/img/incident-response/configuration/settings.png" />

* Under Addin Preferences (XML)  see Cloud Accessible Status

<img src="https://mintcdn.com/phishy-2be9d018/hNRZ2VKV0Q4HIPgE/static/img/incident-response/configuration/status.png?fit=max&auto=format&n=hNRZ2VKV0Q4HIPgE&q=85&s=2a9fa4ca20498b0f0c07851de73e6add" alt="Reported Mail Details Bottom" width="1256" height="376" data-path="static/img/incident-response/configuration/status.png" />

* Enter your Application (client) ID In Client ID section

* Enter your Directory (tenant) ID InTenant ID section

* Enter your Secret Value In Client Secret section

* Finally Click <img src="https://mintcdn.com/phishy-2be9d018/hNRZ2VKV0Q4HIPgE/static/img/incident-response/configuration/synced.png?fit=max&auto=format&n=hNRZ2VKV0Q4HIPgE&q=85&s=0f9e70af06d1ebcfb4f8835a44f1ccd1" alt="Reported Mail Details Bottom" width="82" height="34" data-path="static/img/incident-response/configuration/synced.png" /> button to Enable Email Deleting Feature
