Connecting Microsoft OneDrive

Overview

In order to connect Cloud Protector to your OneDrive file system, your administrator will need to log into Microsoft Azure and collect a few values (Make sure to use the Azure link provided):

• User Id (Object Id)

• Tenant Id

• Client Id

• Client Secret (Copy and save the secret right after creating it; you won't be able to view it later.)

---

1. Collect the Object ID (User ID)

This is the alphanumeric Object ID of the user with admin access to the data. To locate it, go to the Users page of Azure Portal > Click on the User > Copy the Object ID.

---

2. Create a Confidencial Application

An application must be created within Azure Portal App Registrations with permissions granted to Confidencial.

2.1 Navigate to the Azure portal App registration page

1. Create an application

   1. Name: Confidencial CP App

   2. Settings: account in this org only

2. Provide the application the required permissions (Microsoft Graph API permissions):

2.2 API Permissions > Add permissions > Microsoft Graph

2.3 Application permission > Search: Files.ReadWrite

2.4 Select Files.ReadWrite.All > Add Permissions

2.5 Delegate Permissions > Search: Files.readwrite

2.6 Select Files.ReadWrite

2.7 Select Files.ReadWrite.All > add Permissions

2.8 Application Permission > Search Sites.read.all

2.9 Select: Sites.Read.All > Add Permissions

2.10 Delegated Permissions > Search User.read

2.11 Select: User.Read

2.12 Select: User.Read.All > Add permissions

2.13 Application Permissions > User.Read.All

2.14 Select: User > User.Read.All > Add permissions

---

3. Gather the Tenant Id and Client Id

Navigate to: App Registration > All Applications > Confidencial Cloud Protector App (Your new application)

Collect the two values and save them on a separate sheet:

• Application (Client) ID

• Directory (Tenant) ID

---

4. Add a Client Secret

After your app is registered, you can create a client secret. Click the link next to Client Credentials and add a secret.

Be sure to copy the secret value (not the secret ID) immediately after creation—you won't be able to see it again once you leave the page!

---

5. Complete the form in Cloud Protector Settings

5.1 Navigate to Cloud Protector > Settings > Add Source

5.2 Select Type > OneDrive

1. Give your source a name that will help you recognize it.

2. Input the Path: the actual file path in the cloud storage that you want to analyze, encrypt, or both. Leaving this as "root" will include the whole file system.

3. Input the other values you have gathered.

4. Click “Test Connection & Save”.

---

OneDrive Connection is now Complete.

---