This guide will walk you through the process of connecting Cloud Access Monitor to your Microsoft 365 Cloud Environment. There is a setup video, as well as written documentation below.
Please review these Microsoft 365 requirements BEFORE proceeding!
Microsoft does not allow Administrator access to user OneDrive files and folders by default, Cloud Access Monitor requires these permissions in order to gain OneDrive file / folder visibility.
The ManagedMethods team has developed a tool to automatically open these permissions in your environment. Below are instructions to use the Authorization tool.
NOTE: This tool will make the admin account used an owner on all OneDrive's and SharePoint sites. You may skip the Authorization tool installation and still gain visibility into Emails and Accounts.
License Detail-Login Monitoring
Azure Active Directory Premium P2 subscription allows for Cloud Access Monitor to provide more detailed login information, such as login location. Instructions to check this can be found here.
STEP ONE:
Did you want OneDrive visibility? Click Here to run the Authentication Tool. This will add permissions to allow OneDrive Visibility.
STEP TWO:
Sign into your ManagedMethods Cloud Access Monitor instance.
STEP THREE:
Select the Add SaaS App button on the top right of the screen.
STEP FOUR:
Select Office 365 from the list of apps.
Give the Oauth project a title
For User Domains enter in all domains associated with your company.
(Ex: managedmethods.com, managedmethods.net, managedmethods.onmicrosoft.com)
Email To Get Alerts: Enter an email address to have alerts sent to.
(All other sections remain as DEFAULT values)
Choose any Countries, or IP addresses to Approve, or Unapproved. Any Violations will appear within the OAuth homepage once configured.
Select Save & Authenticate.
STEP FIVE:
A New Pop-up window will appear, asking you to login to an administrative Microsoft 365 Account, enter credentials and sign in.
(Must be related to tenant domain "[email protected]")
NOTE: Pop-ups may be disabled in your browser, if you do not receive a pop-up, please enable them for your instance URL, and re-authenticate.
STEP SIX:
Once signed in, ManagedMethods Production App will ask for permissions, select the Accept button at the bottom of the pop-up.
STEP SEVEN:
An Authorization Completed Successfully page will appear.
STEP EIGHT:
You may now click back to Audit & Control to view your recently created OAuth project.