OneDrive setup

The Intric OneDrive integration uses Microsoft Graph with delegated permissions to access a user’s personal OneDrive on their behalf. Whether admin consent is required depends on your organization’s Entra configuration.

Microsoft Entra includes a User consent settings policy that controls whether users in your organization can grant OAuth permissions to third-party apps on their own. Many organizations — particularly security-conscious ones — set this to require admin consent for all apps, or for apps from non-verified publishers. In those environments:

• No user can connect until an administrator grants tenant-wide consent for the Intric app
• Once granted, any user in the tenant can individually connect their own Microsoft account from My Integrations
• Delegated access only: even after admin consent, the app acts on behalf of the individual signed-in user and can only access that user’s own OneDrive

You must be a Global Administrator or Privileged Role Administrator in your Entra tenant to complete these steps.

Already set up another Microsoft integration? If you have already granted admin consent for Intric’s Teams, Outlook, or SharePoint, the Intric app is already registered in your tenant. Check which permissions are already consented in step 1 — you may only need to approve the OneDrive-specific permissions.

Step 1: Grant admin consent for the Intric app

1. Go to https://entra.microsoft.com and sign in as an admin
2. Navigate to Identity → Applications → Enterprise applications
3. Search for Intric and open the app entry
4. Go to Permissions and click Grant admin consent for [your organization]
5. Review the requested permissions and confirm

The Intric OneDrive integration requests the following delegated permissions:

Permission	Purpose
Files.Read	Read files in the signed-in user’s OneDrive
Files.Read.All	Read files the user has access to, including items shared with them

If the Intric app is not yet present in your tenant’s Enterprise applications, have a user attempt to sign in once so that the app appears, or add it manually by application ID.

Step 2: Configure in Intric

Once admin consent has been granted:

1. Navigate to Admin in the main menu
2. Go to Integrations in the admin panel
3. Find and select OneDrive from the list of available integrations
4. Enable the integration

Users will then see the OneDrive integration available in My Integrations and can connect their own Microsoft accounts individually.

Revoking access

To remove admin consent (prevents all users from using the integration):

1. Go to https://entra.microsoft.com
2. Navigate to Identity → Applications → Enterprise applications → Intric
3. Go to Permissions and remove the consent grant for the OneDrive-specific permissions

Users who have already connected their accounts will lose access immediately.

To revoke a single user’s access, the user can disconnect from My Integrations. An admin can also revoke the token from the Entra admin center under the user’s profile → Applications.

For the end-user guide, see OneDrive.