Procedure

1. Perform the following steps to grant access to SharePoint Online.
   1. On the Dashboard screen, hover over SharePoint Online and click Grant access.
      The Grant Access to SharePoint Online screen appears.
   2. Click the Delegate Account tab.
   3. Specify the Global Administrator credentials (email address and password) and click Verify.

      Important Trend Micro does not save the Global Administrator credentials. They are used only once to create the necessary Delegate Accounts.

   4. Optionally select the Promote all Delegate Accounts to the Global Administrator admin role check box.

      Note Selecting this check box promotes Delegate Accounts to Global Administrator privileges. This automatically synchronizes changes. Clearing this check box leaves Delegate Accounts with Service Administrator privileges. This requires Global Administrator credentials every time you want to synchronize changes.

   5. Select to synchronize all or selected SharePoint site collections of your organization.
      • Select Synchronize all targets and go to Step f.
      • Select Synchronize selected targets and click Next.
        1. Sign in to Microsoft 365 admin center with your Global Administrator account, and go to Admin centers → SharePoint → site collections from the left navigation.
        2. Verify and add the URLs to protect one by one by copying a URL, pasting it into the text box, and clicking Add.

           Note You can add a maximum of 100 site collection URLs.

        3. Optionally select the URLs one by one to remove them.
        4. Go to Step f.
   6. Click Submit.
   7. Hover over the notification icon in the upper-right corner of the management console.
      If the message "SharePoint Online protected." appears on the Notifications screen, the access grant is successful.
2. Perform the following steps to grant access to OneDrive.
   1. On the Dashboard screen, hover over OneDrive and click Grant access.
      The Grant Access to OneDrive screen appears.
   2. Click the Delegate Account tab.
   3. Specify the Global Administrator credentials (email address and password) and click Verify.
   4. Optionally select the Promote all Delegate Accounts to the Global Administrator admin role check box.
   5. Select to synchronize all or selected OneDrive users of your organization that have OneDrive sites.
      If the Delegate Account is already created for SharePoint Online, this option is dimmed and unavailable because it follows what is selected during access grant for SharePoint Online in Step 2.

      If the Delegate Account is not created for SharePoint Online yet,

      • Select Synchronize all targets and go to Step f.
      • Select Synchronize selected targets and click Next.
        1. In the Available Targets area that appears, specify individual users or select users from groups.
           • By User: specify the exact user principal name of a user having OneDrive sites and press Enter to verify and display the user name.
           • By Group: specify at least the first three characters of the group name and press Enter to search for and display the group(s).
        2. Select the user(s) and click the arrow button to add them to the Selected Targets area.

           Note You can synchronize a maximum of 100 users.

        3. Optionally select one or multiple users in the Selected Targets area and click the arrow button to remove them.
        4. Go to Step f.
   6. Click Submit.
   7. Hover over the notification icon in the upper-right corner of the management console.
      If the message "OneDrive protected." appears on the Notifications screen, the access grant is successful.