Choose your directory import scope.
Synchronize eligible users and groups, across your directory or a selected Entra security group.
Microsoft 365Microsoft 365 security: review SharePoint and OneDrive sharing.
Review supported file exposure with the people who own the work. Confirm which access is still needed, remove an eligible permission without Purview setup overhead, and check the result in Microsoft. SharePoint and OneDrive protection use separate connections from directory sync.
Directory sync · Separate OneDrive, SharePoint, and Teams connections
Capabilities
What this integration covers.
Act on exposed files without Purview setup.
Connect OneDrive and SharePoint in minutes to review sharing and remove eligible item permissions.
Reach employees in Teams.
Enable the separate Teams connection to send employees security notifications.
Native controls
Where Elba fits alongside Microsoft sharing controls.
Sharing policy, a permissions snapshot and a business owner’s decision serve different purposes. Keep the native controls you need and evaluate how Elba helps your team review supported exposure and eligible corrections.
| Control or workflow | Question it helps answer | What to evaluate |
|---|---|---|
| Native external-sharing settings | Which external audiences may receive access? | Check organization and site settings together; the more restrictive setting applies. Review the item’s permissions as a separate step.Microsoft’s external-sharing guidance |
| Native permissions snapshot | Which sites have broad permissions or sharing links? | Check SharePoint Advanced Management availability, the report date and excluded sites. A snapshot helps choose a review scope; it is not proof that a later correction worked.Microsoft’s site-permissions report |
| Restricted Content Discovery | Should a SharePoint site be temporarily harder to discover in Copilot? | Check the current license requirements. This SharePoint control leaves existing permissions in place and does not cover OneDrive; check access separately.Microsoft’s discovery-control boundaries |
| Elba sharing review | Does this supported exposure still serve a business need? | Review the finding with its owner, choose an eligible correction and verify the result. Keep unsupported or unresolved access visible. |
Example workflow
Take a sharing finding through an owner decision and a checked correction.
How the integration supports a specific security task.
- 01
Identify the sharing to review
Start with a supported SharePoint or OneDrive finding. Identify the item, permission and available owner context, and retain the observation date and coverage limits.
- 02
Confirm the business need
Ask the owner which collaborators still need access. Record the decision and any exception before changing a link or permission.
Check the correction
Apply an eligible permission-removal action when Elba exposes it. Verify the intended access change and necessary collaboration in Microsoft, including any remaining inherited or group access.
Demo agenda
What to check in a Microsoft 365 sharing-review demo.
- The directory population you want to import, the tenant-wide consent boundary and the separate SharePoint or OneDrive connections your scenario needs.
- A representative supported sharing finding: the item, permission, owner context and the decision on which collaboration to keep.
- The eligible permission-removal action, how to verify the result in Microsoft and which inherited, group or unsupported access needs separate follow-up.
- How permissions review differs from limiting Copilot discovery, with native prerequisites and coverage kept explicit.
Agree a representative scenario with our team. Findings and actions depend on the active connection and object. Directory sync alone does not inspect files, and the demo does not require changing your production permissions.
Practical guides
Related capability
Explore this part of the platform.
Before you connect
Coverage, permissions, and requirements.
The Microsoft 365 base connection synchronizes directory data. Teams notifications, phishing simulations, and SharePoint or OneDrive Data Protection use separate Microsoft applications or consent flows.
Explore security & privacyWhich Microsoft role should complete setup?
Use a Global Administrator for the complete flow. Some tenant-wide permissions require that role even when an Application Administrator is recognized during part of sign-in.
Does group scope reduce the permissions granted to elba?
No. It limits which directory records elba queries and stores, while the application permissions accepted during tenant consent remain tenant-wide.
Can the selected group be changed later?
Not after administrator consent. Choose and validate the intended import boundary before authorizing the connection.
Does Elba require Microsoft Purview or E5 licensing?
No. Elba connects directly through Microsoft Graph and SharePoint/OneDrive OAuth consent flows without requiring Microsoft Purview DLP rule authoring or E5 compliance add-ons.
Are SharePoint, OneDrive and Teams included automatically?
No. These capabilities use separate applications or consent flows and must be reviewed and enabled independently.
Coverage and requirements
- Group scope is a query-and-storage boundary in elba, not a Microsoft authorization boundary; application permissions remain tenant-wide.
- The import scope cannot be changed after administrator consent has been granted.
- Group mode includes eligible direct members only; guests, disabled accounts and nested-group-only members are excluded.
- A group-scoped sync requires the elba organization owner to remain an eligible direct member of the selected group.
- The base directory connection does not imply that Teams, phishing, SharePoint or OneDrive capabilities are enabled.
Other applications
Review more integrations.
Discuss your requirements
Evaluate Elba for your Microsoft 365 sharing review.
Walk through a supported SharePoint or OneDrive finding, the owner’s decision and the evidence to check after an eligible correction. Confirm the required connections and remaining access paths before choosing your next step.