Views:
Cloud App Security supports using OAuth 2.0 to access OneDrive with a service account (Authorized Account). With the OAuth 2.0 framework, Cloud App Security uses an access token to obtain limited access on the Global Administrator's behalf to run advanced threat protection and data loss prevention scanning on files in the protected OneDrive sites of your organization.
The steps outlined below detail how to grant access to OneDrive with an Authorized Account from Dashboard.

Procedure

  1. On the Dashboard screen, hover over OneDrive and click Grant access.
    The Grant Access to OneDrive screen appears.
  2. On the Authorized Account tab, click Click here at the end of Step 1.
    The Microsoft logon screen appears.
  3. Click Grant Permission.
  4. Specify your Microsoft 365 Global Administrator credentials and click Sign in.
    The Microsoft authorization screen appears.
  5. Click Accept to grant Cloud App Security necessary permissions to protect OneDrive sites.
  6. Go back to the Cloud App Security management console and click Submit.
    Cloud App Security then updates the OneDrive data in your organization. The time required depends on how much data you have in OneDrive.
  7. Hover over the notification icon in the upper-right corner of the management console.
    If the message "OneDrive protected." appears on the Notifications screen, the access grant is successful.

Next steps

If for some reason the access token becomes invalid, go to Administration → Service Account to create a new access token for the service account. For more information, see Service account.