---
name: Exult Healthcare M365 Tenant
description: Microsoft 365 tenant details, credentials, and setup status for Exult Healthcare clinic
type: project
---

Exult Healthcare M365 tenant setup in progress as of 2026-04-02.

**Tenant:** Exult Healthcare
- Tenant ID: 707a7153-af93-4b65-ae01-bfa6febbffdb
- Domain: exulthealthcare.com (verified, default)
- Initial domain: ExultHealthcare.onmicrosoft.com
- Address: 4801 Medical Center Dr, McKinney, TX 75069
- Phone: (469) 714-0006
- Created: 2026-03-10 (migrated from ARC Health)

**License:** O365_BUSINESS_PREMIUM SKU (internal name maps to M365 Business Standard, $12.50/user/mo — NOT Business Premium despite the SKU name). 25 seats, 25 consumed. Does NOT include Intune.

**Key Accounts:**
- exulthealthcare@exulthealthcare.com — Global Admin, has MFA (authenticator app), password: Exult25!!
- agent@exulthealthcare.com — Created 2026-04-02, no MFA, password: ExultClaude!2026#Secure, user ID: cb36c2c5-416a-48f5-9a4d-da0f35b6bb32. **Global Admin role assigned (confirmed 2026-04-02T07:00).**
- migadmin@exulthealthcare.com — Migration Admin from ARC Health, user ID: a0b1afdb-6814-471c-9f72-de147343ad62, member of MigrationWiz group. **Password reset to: ExultCl1n1c!2026#Secure (2026-04-02T07:00).**
- raj.bhargava@exulthealthcare.com — Gautam's father, clinic owner

**API Access (COMPLETE):**
- Custom app registration: "Exult Agent Service"
  - App ID: 6725660a-f83a-4cb0-8892-14a223e0a701
  - Object ID: a9f574c2-c732-4bda-94db-2a0ec4d66fe5
  - Service Principal ID: 2c6b159f-73f6-4d05-bd8f-94a6f5a7c5f5
  - Client secret 1 hint: wvj (expires 2027-04-02) — created by bb-forever session
  - Client secret 2 hint: qH5, keyId: fc933b3c (expires 2027-04-02) — full value: qH58Q~C_xKwh1Zh01VnC.xE8G4YnD6C.sAYG-ce0
  - Client secret 3 hint: oLM, keyId: b6b4a2ba (expires 2027-04-02) — "Claude Code Key"
  - Credentials file: ~/.config/exult-m365/app_creds.json (contains tenant_id, client_id, client_secret for secret 3)
  - Token saved at: /tmp/m365_app_token.json
  - Auth flow: client_credentials (no user interaction needed)
  - Granted roles: Mail.Read, Mail.ReadWrite, User.Read.All, User.ReadWrite.All, Calendars.Read
  - Verified working: can read any user's mail, list users, access calendars
- ROPC (password grant) also works for exulthealthcare@ account as backup
- Existing migration apps: BitTitan MigrationWiz (3 secrets), MigrationWiz x2, PnP-OneDrive-Provisioning, BitTitan

**38 total user accounts** across clinic staff, service accounts (fax, referrals, billing, office, prescriptions), and a printer (c308.konica).

**Why:** Gautam wants AI agent connected to M365 for managing email, shared inboxes, device management, and clinic IT operations.
**How to apply:** Use the agent@exulthealthcare.com account for all M365 operations. Once app registration is complete, use client_credentials for unattended access.