Add Office 365 Account
After all the Office 365 configurations are completed from previous sections, follow these steps to add your Office 365 account on FortiCASB.
- Log into FortiCASB, go to Dashboard > Business Unit Overview, and click Add New.
- Select Office 365, and click Add Selected Cloud App.
- You will be prompted to provide administrator credentials. This is for the automation process of adding the global administrator as the "site collection administrator" for the users under the administrator account. For more details refer to https://docs.microsoft.com/en-us/sharepoint/manage-user-profiles
- Click OK.
- After logging in, Office 365 will prompt you to accept FortiCASB access.
- After you accept FortiCASB to access your Office 365 account, you will be redirected back to the FortiCASB dashboard.
Note: The credentials are only used for a one time configuration, FortiCASB will not store your Office 365 credential.
Alternatively, if you don't want FortiCASB to audit your OneDrives, or want to install it manually, you can check "Prefer not to provide".
|
If you have a custom SharePoint homepage URL, you will have to allow collection manually. See Manually Activate Sites Collection. |
You will be redirected to the Office 365 login screen.
Note: FortiCASB does not request all but only partial permissions from the global administrator user. Below is a list of permissions requested by FortiCASB.
|
Permissions requested by FortiCASB |
| Read and write files in all site collections | |
| Read items in all site collections (preview) | |
| Read files in all site collections | |
| Read and write all users' full profiles | |
| Read all users' full profiles | |
| Read and write items in all site collections (preview) | |
| Read all users' full profiles | |
| Read all groups | |
| Read and write all groups | |
| Read directory data | |
| Read and write directory data | |
| Access directory as the signed in user | |
| Read all files that user can access | |
| Read items in all site collections | |
| Read all groups | |
| Read directory data | |
| Read activity report for your organization | |
| Read activity data for your organization | |
| Sign in and read user profile | |
| Read directory data |
You can see the installation checklist and monitoring status in the Office 365 dashboard. Notice that Add Sites Collection Admin is checked indicating that FortiCASB can now audit your OneDrive data.
|
If you checked "Prefer not to provide" earlier during authentication, please refer to Manually Activate Sites Collection for more details. |