Well it worked finally - well sort of.
I created another user in O365 called Scanner Device (scandev@~~) assigned global admin rights and updated the copier. All the the other network settings were fine (TLS, port etc). And the scan sent it to email.
Of course it kept it internal.. which over all I suppose is perfect,.. but we haven't fully cut over from our POP email yet.
Two things of interest though:
- Global Rights seem to be a breach point..
- The scan came in a ZIP file
But otherwise - it worked just fine.