Overview

These instructions are used for onboarding Microsoft 365 Tenants as Infrastructure Connections within Netskope One DSPM. Such connections permit Netskope One DSPM to automatically discover, connect, and scan OneDrive, Teams sites, and SharePoint document libraries. Follow the steps below for each Microsoft 365 Account you wish to onboard to Netskope One DSPM.

Register Netskope One DSPM App in Microsoft 365

1. Login to the Microsoft 365 admin center.
2. From the left side nav, click Show all→All admin centers.
3. Click on the hyperlink for Microsoft Entra.
4. From the left nav, click Applications → App registrations.
5. Click New registration.
6. Create your new app registration. Include Netskope One DSPM in the name for your reference and keep settings as default. Then click Register.
7. From the Overview screen, capture Application ID and Tenant ID (Directory ID) for use in Netskope One DSPM.

Create Client Secret

1. From Netskope One DSPM App overview, navigate to Certificates & secrets and click on New client secret.
2. Enter Description and validity of secret.
3. On clicking Add, the secret is created. Copy and capture the Secret value as Application Secret.

Add API Permissions to Netskope One DSPM App

You'll need to add several API permissions for both Microsoft Graph and SharePoint for Netskope One DSPM to complete the infrastructure connection and auto-connect to data stores.

Microsoft Graph

1. Click API Permissions from the left nav, then click Add a permission.
2. Click the large button for Microsoft Graph → Application Permissions.
3. Search for and add all of the following permissions by checking the box to the left of the permission name.

Directory.Read.All
Files.Read.All
Group.Read.All
User.Read
User.Read.All

SharePoint

1. Click API Permissions from the left nav, then click Add a permission.
2. Click the large button for Microsoft Graph → Application Permissions.
3. Scroll down until you see the button for SharePoint. Click on it then click Application Permissions.
4. Search for and add Sites.Read.All by checking the box to the left of the permission name.

Once you've added all the permissions, click Grant Permissions on the Configured permissions screen to finish granting admin consent for all configured permissions.

Create Netskope One DSPM Infrastructure Connection

1. Log into Netskope One DSPM
2. Navigate to the Administration > Infrastructure Connections > Microsoft 365 tab
3. Click the Add Infrastructure button.
4. Click Next. 
5. Disable auto-discovery and auto-connection to Apps (only if desired).
6. Click Next.
7. Enter the following values:

5. Click Next.
6. Select if you want Netskope One DSPM to scan all data or selected groups, which appear as a drop-down pick list.
7. Hit Save to complete the Infrastructure connection.

Next Steps

• Repeat the above steps if you have additional Microsoft 365 Accounts to onboard in Netskope One DSPM.
• Review auto-connected OneDrive, SharePoint, and Teams sites. You can also connect to other OneDrive and SharePoint sites manually.