Cloudflare Docs
Cloudflare Zero Trust
Edit this page
Give us feedback
View GitHub RSS feed
Set theme to dark (⇧+D)

OneDrive

The OneDrive integration detects a variety of data loss prevention, account misconfiguration, and user security risks in an integrated Microsoft 365 account that could leave you and your organization vulnerable.

​​ Integration prerequisites

​​ Integration permissions

Refer to Microsoft 365 integration permissions for information on which API permissions to enable.

​​ Security findings

The OneDrive integration currently scans for the following findings, or security risks. Findings are grouped by category and then ordered by severity level.

To stay up-to-date with new CASB findings as they are added, bookmark this page or subscribe to its RSS feed.

​​ File sharing

Get alerted when files in your Microsoft 365 account have their permissions changed to a less secure setting.

FindingSeverity
Microsoft File Publicly Accessible Read and WriteCritical
Microsoft Folder Publicly Accessible Read and WriteCritical
Microsoft File Publicly Accessible Read OnlyHigh
Microsoft Folder Publicly Accessible Read OnlyHigh
Microsoft File Shared Company Wide Read and WriteMedium
Microsoft File Shared Company Wide Read OnlyMedium
Microsoft Folder Shared Company Wide Read and WriteMedium
Microsoft Folder Shared Company Wide Read OnlyMedium

​​ Data Loss Prevention (optional)

These findings will only appear if you added DLP profiles to your CASB integration.

FindingSeverity
Microsoft File Publicly Accessible Read and Write with DLP Profile matchCritical
Microsoft File Publicly Accessible Read Only with DLP Profile matchCritical