Microsoft OneDrive

To configure OneDrive as a connector in Seqrite Data Privacy, follow two steps:

Configure the App Registration in Microsoft Entra

Follow these steps to configure the App Registration in Microsoft Entra:

  1. Login to the Microsoft Entra to create a New App Registration.
  2. Click New registration.
  3. Enter Name, Support account types and click Register.
  4. Note: Redirect URL field is optional.

  5. Once the app is registered navigate to the Overview of newly created App Registration.
  6. Note the Application Client ID, Directory(Tenant)ID which will be used in the Creation of One Drive Instance in Seqrite Data Privacy Console.
  7. Create a Client Credentials from the Overview page.
  8. To create a New Client Secret, go to Certificate & secret and click +New Client Secret.

  9. Add a client secret popup appears.

  10. Enter Description, select the maximum time duration for the Client secret Expiry and click Add.
  11. Save the Value (client secret) and use this as a Client Secret in Seqrite Data Privacy Admin Console during instance creation.
  12. Important:
    Once you generate a client secret, make sure to copy and store it immediately. If you leave the page and return later, the client secret/value will appear masked and cannot be retrieved in full. In that case, you will need to create a new client secret.

  13. From left navigation menu of same App Registration, select the API Permissions under Manager and click + Add a permission.
  14. Request API permission popup appears.

  15. Click Microsoft Graph.
  16. Click Application permissions, choose the required permissions from the dropdown list (See the table below for reference) and click Add Permissions.
  17. Note: By default, the User.Read API permission is included. You can select and add API permissions as required by your connector.

    API / Permissions name Type Permission Admin Consent Required
    Directory.Read.All Application Read directory data Yes
    Files.Read.All Application Read files in all site collections Yes
    User.Read.All Application Read all users’ full profiles Yes
  18. After adding the permissions, be sure to Grant Admin Consent. Without granting consent, the configuration may not function as intended
  19. Note: These Permissions and Grant Consent is necessary for the Connector Discovery and Classification of Data.

Add OneDrive Connector Configuration in Seqrite Admin Console

Follow these steps to configure OneDrive as a Connector:

  1. In the left navigation pane, click Discovery and Classification and then click Connectors.
    Configured Data Sources page is displayed.
  2. Select OneDrive from the configured data source list, and then click Add Instance.
  3. Enter Instance Details and Owner details:
    • Name
    • Description
    • Process
    • Connection Type
    • Client ID
    • Tenant ID
    • Client Secret
    • Country
    • City
    • Time Zone
    • Data Source Owner: The person who owns the data source and makes technical decisions about it.
    • Business Owner: The person who is responsible for the business decisions about the data source

    Note: The Client Secret and Tenant ID generated during Configure the App Registration in Microsoft Entra are required to complete this configuration.

  4. Click Check Connection .
  5. If the provided details are accurate, the connection with OneDrive will be established successfully.

  6. Click Next.
  7. Enter the Data Source Scan Availability details.
  8. This setting defines when the data source is available for on-demand scan, re-indexing scan, or deep scan.

    • Availability: Monthly, Weekly or Daily
    • Scan Days
    • Available Time

  9. Click Next.
  10. Enter Scan Schedule/Scan Frequency details:
    • Scan Frequency
    • Deep Scan Frequency

    Note:

    • The data source will be available for scanning monthly on selected date.
    • The data source will be scanned based on the user‑defined interval. A deep scan will be performed after the number of scan cycles specified by the user.

  11. Click Next.
  12. In Users Scan Settings, select Scan Type that is either Full User or Selective User Scan.
  13. Note:

    • By default, the data source scan includes all registered users. For a more customised approach, opt for the Selective User Scan option.
    • Choose specific user tags based on your selected scan mode to include or exclude particular users or user groups.
  14. Click Add Instance.
  15. Instance of the data source is added successfully.

Was this page helpful?