Catch forgotten external links.
Discover anonymous and external-recipient links created from employee OneDrive folders.
OneDriveOneDrive security: clean up external links and personal drive drift.
Monitor OneDrive for Business sharing continuously, spot sensitive files exposed to personal email accounts or stale external links, and revoke unneeded permissions.
OneDrive for Business API · Separate Microsoft 365 data connection
Capabilities
What this integration covers.
Involve the drive owner directly.
Ask employees in Slack or Teams whether an external recipient still needs access.
Revoke eligible OneDrive permissions.
Remove unapproved sharing links and external collaborators from OneDrive items in one click or via Playbooks.
Example workflow
Clean up an external link on an employee OneDrive file.
How the integration supports a specific security task.
- 01
Flag external link
Elba detects a sensitive file shared externally from an employee’s OneDrive.
- 02
Ask the file owner
Sam prompts the owner in Teams or Slack to confirm or revoke the external share.
Remove access
Elba removes the eligible OneDrive sharing permission and updates the finding status.
Related capability
Explore this part of the platform.
Before you connect
Coverage, permissions, and requirements.
OneDrive Data Protection uses a separate Microsoft application consent flow from base Microsoft 365 directory synchronization and SharePoint.
Explore security & privacyWhy review OneDrive separately from SharePoint?
Employees use OneDrive for rapid, ad-hoc file sharing outside structured SharePoint sites, and SharePoint site-level Copilot discovery controls do not cover OneDrive drives.
Does OneDrive Data Protection require Microsoft Purview?
No. Elba inspects supported OneDrive sharing and applies eligible permission removals directly through Microsoft Graph consent without Purview setup.
Can employees resolve their own OneDrive sharing alerts?
Yes. Elba routes sharing reviews to the drive owner via Microsoft Teams or email so employees can confirm business context or remove stale links.
Coverage and requirements
- OneDrive Data Protection requires its own consent flow separate from Microsoft 365 directory sync and SharePoint.
- Folder-level inherited permissions may require updating the parent folder if an item inherits sharing from above.
- Direct permission removal applies only to supported OneDrive items and links exposed as eligible in Elba.
Other applications
Review more integrations.
Discuss your requirements
Evaluate Elba for OneDrive.
Review the available capabilities, required permissions, and setup for your environment with our team.