Cloud App Security protects:
Office 365 services, including Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams
Google Workspace, including Google Drive and Gmail
Cloud storage applications, including Box and Dropbox
CRM platform, which is Salesforce
Cloud App Security requires service accounts to integrate with those applications and services that it protects. The service accounts can be categorized as:
Delegate accounts to integrate with Exchange Online, SharePoint Online, and OneDrive
Authorized accounts to integrate with Exchange Online, SharePoint Online, OneDrive, Microsoft Teams (Teams and Chat), Box, Dropbox, Google Drive, Gmail, and Salesforce
The service account that you create in Cloud App Security does not require a license.
Cloud App Security enables you to use either a Delegate Account or an Authorized Account to protect your Exchange Online, SharePoint Online, and OneDrive.
Starting on April 19, 2020 Cloud App Security is supporting only provisioning the Authorized Account for Exchange Online, and stops the support for automatic and manual provisioning of the Delegate Account for Exchange Online. If you have already created a Delegate Account, Cloud App Security will continue to protect your Exchange Online service using this account. You can also migrate to use a modern authentication based Authorized Account for protection by Cloud App Security. For more information, see Migrating to Use Authorized Account for Exchange Online. If you have not created a service account for Exchange Online yet, you can start by creating an Authorized Account. For more information, see Provisioning an Exchange Online Authorized Account.