For customers who have granted Cloud Email and Collaboration
Protection access to
the SharePoint Online and OneDrive services with a Delegate Account, Cloud Email and Collaboration
Protection now supports migrating the customers to a
modern authentication based Authorized Account for protection.
Trend Micro recommends that customers currently with a Delegate Account complete the
migration as early as possible.
ImportantBefore migration to use token-based authentication is successful, Cloud Email and Collaboration
Protection continues to protect your
SharePoint Online and OneDrive services by using the current basic
authentication.
|
Procedure
- Go to , and then click Migration Available under
Status of the SharePoint Online service
account.The Migrate to Use Authorized Account screen appears.
Note
If you have granted only access to the SharePoint Online service with a Delegate Account , the Migrate to Use Authorized Account screen shows a four-step procedure for migrating to use Authorized Account for SharePoint Online; if you have granted only access to the OneDrive service with a Delegate Account, the screen shows a three-step procedure for migrating to use Authorized Account for OneDrive; if you have granted access to both services with a Delegate Account, the screen shows the procedure for SharePoint Online first, and then the procedure for OneDrive after you complete the procedure for SharePoint Online.Here it is assumed that you have granted access to both services with a Delegate Account. - Follow steps 4 through 6 in Granting access to Sharepoint Online with an authorized account.
- Go back to the Cloud Email and Collaboration
Protection management console
and click Next.The message "Are you sure you have followed the instructions for step 2 to grant Cloud Email and Collaboration Protection permissions to receive notifications from Microsoft for real-time scanning on your SharePoint Online sites? Cloud Email and Collaboration Protection cannot receive notifications from Microsoft for real-time scanning on your SharePoint Online sites if you do not grant the permissions." appears.
- Click Yes.The Migrate to Use Authorized Account screen for the OneDrive service appears.
- Click Click here at the end of Step 1.The Microsoft logon screen appears.
- Follow steps 4 through 6 in Granting access to OneDrive with an authorized account.
- Go back to the Cloud Email and Collaboration
Protection management console
and click Submit.The message "Are you sure you have followed the instructions for step 2 to grant Cloud Email and Collaboration Protection permissions to receive notifications from Microsoft for real-time scanning on your OneDrive sites? Cloud Email and Collaboration Protection cannot receive notifications from Microsoft for real-time scanning on your OneDrive sites if you do not grant the permissions." appears.
- Click Yes.Cloud Email and Collaboration Protection then updates the SharePoint Online and OneDrive data in your organization. The time required depends on how much data you have in SharePoint Online and OneDrive.
- Click Done.
- Hover over the task icon in the upper-right corner of the management
console.If the message "Migrated to use Authorized Account for SharePoint Online" or "Migrated to use Authorized Account for OneDrive" appears, the migration is successful. Cloud Email and Collaboration Protection will protect your SharePoint Online and OneDrive services using token-based modern authentication through the created Authorized Account.
- Click Delegate Account Cleanup under
Status of the SharePoint Online or OneDrive service
account, and click Delegate Account cleanup
for SharePoint Online or Delegate Account cleanup for
OneDrive to clean up the Delegate Account.
Note
The Delegate Account Cleanup and Delegate Account cleanup for SharePoint Online (or Delegate Account cleanup for OneDrive) links are available only if the Delegate Account that you previously use is not assigned to the Global Administrator role. - On the Delegate Account Cleanup screen that appears, specify your Microsoft 365 Global Administrator credentials and click Done to clean up the Delegate Account.
- (Optional) Delete the Delegate Account in your Microsoft 365 admin
center.
-
Go toand view the account name for SharePoint Online and OneDrive.
-
Log on to your Microsoft 365 admin center.
-
Go to, and then locate and select the Delegate Account to delete the account.
-