Configure Microsoft for the Incydr OneDrive data connection

Overview

You need to configure your Microsoft environment before you can authorize the Incydr data connection to it. To configure your Microsoft environment, verify that audit is turned on in preparation for the Incydr data connection. This article helps you verify that audit is on or turn it on if needed.

Considerations

Incydr requires a Microsoft license or subscription that includes Audit (Standard) in order to monitor file activity in your OneDrive environment.

Incydr monitoring requires that audit is turned on
Audit must be turned on in your Microsoft environment in order for Incydr to be able to monitor file activity in OneDrive. If auditing is off, Incydr cannot collect data and no file events are displayed in Forensic Search.

If you have one of the Microsoft business licenses, you may need to turn on auditing in your environment before connecting with Incydr. Unless it has previously been turned off, customers with a Microsoft enterprise license may already have auditing turned on by default.

Verify audit is turned on

1. Sign in to the Microsoft Purview compliance portal using your Microsoft global administrator username and password.
2. Click Show all in the left navigation pane, then click Audit.
   If auditing is turned off in your environment, the banner at the top of the Search tab prompts you to start recording user and admin activity. This banner does not appear if auditing is already on.
   
3. If prompted, click the banner at the top of the Search tab to turn on audit.
   The banner updates to indicate that auditing is enabled and you can search for user and admin activity within 24 hours.

External resources

Microsoft documentation:

• Turn auditing on or off
• Reimagine productivity with Microsoft 365 and Microsoft Teams
• Powerful tools to support your enterprise

Related topics

• Connect Incydr to OneDrive 
• Permissions required for the Microsoft OneDrive connector
• Resolve "Microsoft Audit Log is inaccessible" errors for OneDrive
• Cloud storage data connections overview
• Introduction to adding data connections