Restrict sharing access for OneDrive

This article explains how to restrict OneDrive sharing in eShare to a defined set of users. By switching to the 'Limited users' on the Corporate Cloud Providers page  and configuring a Microsoft 365 group, you can ensure that only the users in the group would see OneDrive as a cloud provider and can initiate shares from it. The following steps will be reviewed:

REQUIREMENT:

The person performing these steps must have an eShare Administrator role. Microsoft 365 administrator access is also required to create and manage O365 groups.

Limiting Users to sharing from OneDrive

1. In the eShare Admin Console, navigate to the Corporate Cloud Providers page and switch the access mode from All users to 'Limited users'.

2. In the Microsoft 365 admin center, create an O365 group containing only the users you want to permit OneDrive sharing access in eShare. Record the group's Object ID — you will need it in the next step.

3. In the eShare configuration, enter the following values:

   1. For 'SAML attribute name': http://schemas.microsoft.com/ws/2008/06/identity/claims/role

   2. For 'SAML attribute value': the Object ID of the O365 group created in the previous step.

4. Save the configuration.

Once saved, only members of the specified O365 group will see OneDrive listed as a cloud provider in the Cloud Web Portal.

Users outside the group who attempt to share from OneDrive using the Action Menu will see the following: