Overview

These instructions are used for onboarding Microsoft 365 Tenants as Infrastructure Connections within Dasera. Such connections permit Dasera to automatically discover, connect, and scan OneDrive, Teams sites, and SharePoint document libraries. Follow the steps below for each Microsoft 365 Account you wish to onboard to Dasera.

Register Dasera App in Microsoft 365

1. Login to the Microsoft 365 admin center.
2. From the left side nav, click Show all→All admin centers.
3. Click on the hyperlink for Microsoft Entra.
4. From the left nav, click Applications → App registrations.
5. Click New registration.
6. Create your new app registration. Include Dasera in the name for your reference and keep settings as default. Then click Register.
7. From the Overview screen, capture Application ID and Tenant ID (Directory ID) for use in Dasera.

Create Client Secret

1. From Dasera App overview, navigate to Certificates & secrets and click on New client secret.
2. Enter Description and validity of secret.
3. On clicking Add, the secret is created. Copy and capture the Secret value as Application Secret.

Add API Permissions to Dasera App

You'll need to add several API permissions for both Microsoft Graph and SharePoint for Dasera to complete the infrastructure connection and auto-connect to data stores.

Microsoft Graph

1. Click API Permissions from the left nav, then click Add a permission.
2. Click the large button for Microsoft Graph → Application Permissions.
3. Search for and add all of the following permissions by checking the box to the left of the permission name.

Directory.Read.All
Files.Read.All
Group.Read.All
User.Read
User.Read.All

SharePoint

1. Click API Permissions from the left nav, then click Add a permission.
2. Click the large button for Microsoft Graph → Application Permissions.
3. Scroll down until you see the button for SharePoint. Click on it then click Application Permissions.
4. Search for and add Sites.Read.All by checking the box to the left of the permission name.

Once you've added all the permissions, click Grant Permissions on the Configured permissions screen to finish granting admin consent for all configured permissions.

Create Dasera Infrastructure Connection

1. Log into Dasera
2. Navigate to the Administration > Infrastructure Connections > Microsoft 365 tab
3. Click the Add Infrastructure button.
4. Click Next. 
5. Disable auto-discovery and auto-connection to Apps (only if desired).
6. Click Next.
7. Enter the following values:

5. Click Next.
6. Select if you want Dasera to scan all data or selected groups, which appear as a drop-down pick list.
7. Hit Save to complete the Infrastructure connection.

Next Steps

• Repeat the above steps if you have additional Microsoft 365 Accounts to onboard in Dasera.
• Review auto-connected OneDrive, SharePoint, and Teams sites. You can also connect to other OneDrive and SharePoint sites manually.