Add Office 365 Account
The final step is to add the Office 365 account to FortiCASB to activate site collection. Please follow the steps below.
- Go to Overview > Dashboard.
- From the Cloud App Status widget, click ADD, located next to Office 365.
- You will be prompted to provide administrator credentials. This is for the automation process of adding the global administrator as the "site collection administrator" for the users under the administrator account. For more details refer to https://docs.microsoft.com/en-us/sharepoint/manage-user-profiles
- Click OK.
- After logging in, Office 365 will prompt you to accept FortiCASB access.
- After you accept FortiCASB to access your Office 365 account, you will be redirected back to the FortiCASB dashboard.
Note: The credentials are only used for a one time configuration, FortiCASB will not store your Office 365 credential.
Alternatively, if you don't want FortiCASB to audit your OneDrives, or want to install it manually, you can check "Prefer not to provide".
If you have a custom SharePoint homepage URL, you will have to allow collection manually. See Manually Activate Sites Collection. |
You will be redirected to the Office 365 login screen.
Note: FortiCASB does not request all but only partial permissions from the global administrator user. Below is a list of permissions requested by FortiCASB.
Permissions requested by FortiCASB | |
Read and write files in all site collections | |
Read items in all site collections (preview) | |
Read files in all site collections | |
Read and write all users' full profiles | |
Read all users' full profiles | |
Read and write items in all site collections (preview) | |
Read all users' full profiles | |
Read all groups | |
Read and write all groups | |
Read directory data | |
Read and write directory data | |
Access directory as the signed in user | |
Read all files that user can access | |
Read items in all site collections | |
Read all groups | |
Read directory data | |
Read activity report for your organization | |
Read activity data for your organization | |
Sign in and read user profile | |
Read directory data |
You can check the installation result and SaaS platform monitoring status in the Office 365 dashboard. Notice that Add Sites Collection Admin is checked indicating that FortiCASB can now audit your OneDrive data.
If you checked "Prefer not to provide" earlier during authentication, please refer to Manually Activate Sites Collection for more details. |