Skip to content
Himaya Himaya Himaya

Troubleshooting

Google: “DWD not enabled — only admin mailbox will be scanned”

Section titled “Google: “DWD not enabled — only admin mailbox will be scanned””

Domain-wide delegation isn’t active yet. Check:

  • The Client ID in the Google Admin console is exactly 114733393163502940734.
  • All four scopes were pasted, comma-separated, with no spaces or line breaks.
  • You allowed a few minutes for Google to propagate, then re-ran Test domain-wide delegation.

Google: forwarding/delegate removal fails with 403

Section titled “Google: forwarding/delegate removal fails with 403”

The remediation scope is missing. Add https://www.googleapis.com/auth/gmail.settings.sharing to the delegation scope list in Security → API controls → Domain-wide delegation, then retry.

Section titled “Microsoft 365: consent fails with AADSTS650053”

One of the Graph permission names is invalid or not declared in the app registration. Azure rejects the entire consent request if any name is wrong. Re-check every permission against Required Scopes & Permissions, then Grant admin consent again.

Microsoft 365: a mailbox forward won’t remove

Section titled “Microsoft 365: a mailbox forward won’t remove”

Mailbox-level forwards can’t be cleared via Graph. In the Exchange admin center run:

Terminal window
Set-Mailbox <user> -ForwardingSmtpAddress $null

Helios can remove inbox-rule forwards automatically.

Only the admin mailbox shows up

Section titled “Only the admin mailbox shows up”

You connected the OAuth account but haven’t completed domain-wide delegation (Google) or granted the directory permissions / admin consent (Microsoft 365). See the provider setup guide.