Cannot Be Scanned (Access Denied) Error (SharePoint)

Cannot Be Scanned(Access Denied) error is one of the Data Scan Status in Office 365 > Files page. This guide is targeted on files on Microsoft SharePoint sites.

Root Cause Analysis

The file resided on the Microsoft SharePoint Site is not accessible for data scan, thus returning "Cannot Be Scanned" error. This error occurs when the Office 365 service account used for the FortiCASB onboarding process is not one of the SharePoint Site's admins.

Solution 1: Update Office 365 Account

In FortiCASB, update the Office 365 account and follow the instructions to update the account. The service account should be added automatically to the Sharepoint Site Administrators when the account is successfully updated.

Solution 2 - Add Admin Account to SharePoint Site Admin Group

Before adding an administrator account to the SharePoint Site admin group, please verify that the account is one of the Company Administrators, and this account will be used for Office 365 onboarding process on FortiCASB.

1. Log into Office 365 (https://office.com) with your account to be added to FortiCASB.
2. Click on the App Launcher button at the top left corner, and select Admin.



3. In Microsoft 365 admin center left navigation menu, , click on Show all to show other options. Scroll down to Admin Centers and click SharePoint to access SharePoint admin center.



4. In SharePoint admin center, click on Sites drop down menu, and select Active Sties.



5. In Active sties, under Site name column, scroll down to look for the targeted site name.



6. Click on the Site name, the SharePoint site profile dialog will appear, then click Membership tab.



7. Click +Add site admins to add the Company Administrator account (the account to be added on FortiCASB) as a new site admin. In this way, FortiCASB will be able to monitor and protect the sharepoint site after the company administrator account is added to FortiCASB.

Note: If you want FortiCASB to monitor and protect other Sharepoint sites of the same domain, repeat step 6-7 with a different Sharepoint site.