Configure Email and Agents

You can use the Mail Settings page in the Console to configure a SMTP mail server so analysts can email their reports and data visualizations directly from Oracle Analytics.

You can also use the System Settings page in the Console to customize Email Delivered by Agents Options.

Use Console to Configure a SMTP Mail Server to Deliver Reports

Connect to your organization’s mail server so analysts can email their reports and data visualizations directly from Oracle Analytics.

Oracle Analytics can connect to mail servers with Basic authentication, except for Microsoft Exchange Online (from September 2025). Microsoft plans to fully remove support for Basic authentication by September 2025. If you want Oracle Analytics to use mail services offered by Microsoft Exchange Online (part of Microsoft 365) you must set up and use OAuth2 (Client Credentials Flow) for authentication.

1. In the Oracle Analytics home page, click Navigator , then click Console.
2. Click Mail Settings.
3. Enter the name of the SMTP Server you want to use to deliver emails.

   For example, mymail.example.com.

   If your email server has a public IP address, you can enter the public IP address here instead of the server name.

4. Enter the Port number.

   Common SMTP ports include:

   • 25 (Connection Security = None)
   • 465 (Connection Security = SSL/TLS)
   • 587 (Connection Security = STARTTLS)
5. Enter the name and email address that you want to see in the “From” field of emails delivering reports (Display Name of Sender and E-mail Address of Sender).
   For example, Joe Brown and [e-mail].
6. Click Test to verify the connection.

   If you want to test the connection you must do so before you configure Connection Security settings. You can't use the test feature if you mail server provider uses OAuth2.

   Note:

   You can click Delete at any time to clear all the mail server settings and start again.

7. Optional: If the mail server requires authentication:
   1. In Authentication, select the type of authentication your mail server requires. Either Basic or OAuth2.

      Note:

      OAuth2 support is available with the Oracle Analytics Server July 2025 patch (or later). If you don't see the OAuth2 option, download and install the July 2025 patch (or later). See Patch Oracle Analytics Server Systems. See also Critical Patch Update (CPU) Advisory for Oracle Analytics Server.
   2. For Basic authentication, enter the Username and Password for a user with access to the mail server.

      The password must be between 8 and 255 characters.

   3. For OAuth2 authentication, configure the properties required by your mail server provider.

      Note:

      Currently, Oracle Analytics supports OAuth2 for a single provider: Microsoft - Client Credentials Flow. See Microsoft Exchange Online - Reconfigure Existing SMTP Mail Servers Configured with Basic Authentication to use OAuth2.

      • Username: Username required to authenticate access to the mail server. Any valid user with access to the mail server.
      • Provider: Select Microsoft as the provider for Microsoft Exchange Online (Microsoft 365).
      • Grant Type: Select Client Credentials.
      • Client ID: Enter the client ID required to access the mail server.
      • Client Secret: Enter the client secret required to access the mail server.
      • Directory (Tenant) ID: (Microsoft only) Identifier for the mail server's tenant.
8. Optional: To set up a secure mail server:
   1. Click Connection Security, and select the appropriate security protocol for your mail server.
      • SSL/TLS: Select if your mail server uses SSL or TLS. The port value defaults to 465.
      • STARTTLS: STARTTLS is a way to take an existing insecure connection and upgrade it to a secure connection using SSL or TLS. The port value defaults to 587.

      In TLS Certificate, the Default Certificate is selected for you. The default certificate allows encrypted mail server communication. In most cases, you don’t need to provide a compatible certificate as most mail servers can use the default certificate, including Office 365.

   2. Optional: Upload a custom TLS certificate. In TLS Certificate, select Custom Certificate , and then click Select to navigate to the certificate file (.pem).
      If you haven’t configured a virus scanner, you're prompted to configure one now or proceed without a virus scanner.
9. Click Save.

   If successful, you see the message SMTP configuration has been updated. Allow some time for your changes to refresh through your system and Email menu options to display.

   If your mail server uses OAuth2 authentication and Oracle Analytics can't obtain an OAuth2 token, you see the message Invalid configuration: SMTP configuration has been updated but is invalid. In this case, validate the OAuth2 setup for your mail server provider, verify that the Username, Client ID, Client Secret, and Directory (Tenant) ID settings you entered here are correct, and then try to save the mail server configuration again.

Microsoft Exchange Online - Reconfigure Existing SMTP Mail Servers Configured with Basic Authentication to use OAuth2

If Oracle Analytics currently uses Microsoft Exchange Online to send emails with Basic authentication, you must update your mail server configuration to use OAuth2 authentication before September 2025.

Microsoft Exchange Online is a cloud-based email and calendaring service, and it's part of Microsoft 365. Microsoft is deprecating Basic authentication for Microsoft 365 (including SMTP), in favor of modern authentication (OAuth2) and will fully remove support for Basic authentication by September 2025. See Deprecation of Basic Authentication in Microsoft Exchange Online.

To continue sending emails through Exchange Online, you must download and install the Oracle Analytics Server July 2025 patch (or later), reconfigure your mail server to use OAuth2 authentication, and then update your mail settings in Oracle Analytics. Oracle recommends you transition to OAuth2 as soon as possible to ensure email features keep working in Oracle Analytics after September 2025.

1. Download and apply the Oracle Analytics Server July 2025 patch (or later).
   See Patch Oracle Analytics Server Systems. See also Critical Patch Update (CPU) Advisory for Oracle Analytics Server.
2. In Microsoft Exchange, set up the Client Credentials OAuth2 flow for Oracle Analytics.
3. After registering Oracle Analytics as a client application, make a note of the client ID, client secret, and directory (tenant) ID. Oracle Analytics requires this information to connect to Microsoft Exchange.
4. In Oracle Analytics, navigate to the Console and click Mail Settings.
5. Go to Authentication, and change Basic to OAuth2.
6. For Provider, select Microsoft. For Grant Type, select Client Credentials.
7. Specify values for the Client ID, Client Secret, and Directory (Tenant) ID.
8. Click Save.

Control Who Can Deliver Content (or Links to Content) by Email

By default, everyone can deliver and receive content by email after you set up the email server. If you want to restrict email delivery, you can grant the Deliver Content in Email privilege only to specific users and application roles or you can disable the feature for everyone.

The option to deliver links to content in email isn't enabled by default. So if you want to allow users to email content links, you must specifically grant the Deliver Content Link in Email privilege to one or more users or application roles.

Note:

The Deliver Content in Email and Deliver Content Link in Email privileges apply only to content you create from the Classic home page, that is, analyses, dashboards, pixel-perfect reports, briefing books, and so on.

1. On the Classic Home page, click the user profile icon, and then click Administration.
2. Click Manage Privileges, and navigate to the Delivers section.
3. To restrict who can send and receive content by email, configure the Deliver Content in Email privilege.
   • Select specific users and application roles, and set the permission to Granted (or Denied).
   • Authenticated User - Set to Denied to prevent access to everyone.
   Only users granted the Deliver Content in Email privilege see the Email option.
4. To allow users to send content links by email, configure the Deliver Content Link in Email privilege.
   • Select specific users and application roles, and set the permission to Granted (or Denied).
   • Authenticated User - Set to Granted to allow everyone to deliver content links.

   Only users granted the Deliver Content Link in Email privilege see the Deliver link to results option when configuring delivery agents.