How to Configure Impersonation for OneDrive for Business Data Sources

Transcription

1 How to Configure Impersonation for OneDrive for Business Data Sources Before Getting Started Download and install the SharePoint Online Management Shell from the Microsoft Windows Download Center to a windows computer with PowerShell installed, and download the AdminRights.ps1 script to the same Windows computer where you installed SharePoint Online Management Shell. Alternatively, after downloading and installing the SharePoint Online Management Shell, you can follow the steps in the Microsoft support article Assign ediscovery permissions to OneDrive for Business sites. In order for Barracuda Cloud-to-Cloud Backup to access OneDrive user accounts for backup, you must create a new service account with administrative privileges, and then assign that account SharePoint Site Collection Administrator privileges. Step 1. Create a New Service Account 1. Log in to your Office 365 Management Panel using an account with administrative privileges, and click users and groups in the left pane. 2. click the + symbol to create a new account. 3. In the details page, enter the details for the new service account, and click next. 4. In the settings page, select Yes to assign administrator permissions, and from the drop-down menu, select Global administrator. Optionally, you can add an alternate address and location. Click next. 5. In the assign licenses page, make no changes. Click next. 6. In the send results in page, click Create. The service account details are sent to the admin. 7. To activate the account, log in to your Office 365 Management Panel using the new service account, and update the password. Step 2. Configure Permissions Use this step to configure permissions for current users. There are two options you can use to give the service account created in Step 1. Create a New Service Account access to user accounts: Option 1 Run a SharePoint Online Management Shell script to automatically apply the proper permissions to each user account; this is the preferred and fastest. If you have multiple users, this is also the easiest method. or Option 2 Manually configure each user account from within the Microsoft SharePoint Admin Center. If you have only a few users, this is the easiest method. Option 1. Configure Permissions Using a SharePoint Online Management Shell Script 1. Download and open the AdminRights.ps1 script using a text editor such as Notepad. 2. Navigate to and edit the following four variables: 1 / 6

2 $o365login Replace with your Office 365 service account or administrator account username. $o365pw Replace with your Office 365 service account or administrator account password. $spadminurl Replace with the same URL used in your organization's OneDrive URL, but suffixed with -admin $spmyurl Replace with the same URL used in your organizations OneDrive URL, but suffixed with -my Save and close the script. Locate the SharePoint Online Management Shell installed in Step 1, then right-click and click Run as administrator. Change your working directory within the SharePoint Online Management Shell to the location where you saved the AdminRights.ps1 script: 6. Run the following command: Set-ExecutionPolicy Unrestricted 7. Run the following command to run the AdminRights.ps1 script:.\adminrights.ps1 2 / 6

3 8. 9. Press Enter to exit the script. Exit SharePoint Online Management Shell. You must complete the steps in Option 1 each time you add new users. Option 2. Configure Permissions from the Microsoft SharePoint Admin Center 1. Log in to your Office 365 Management Panel using the service account created in Step 1. Create a New Service Account. 2. In the left pane click Admin centers > SharePoint, and click user profiles. 3. Click Manage User Profiles: 3 / 6

4 4. In the Find profiles field, type the name of a user who's OneDrive for Business data is to be backed up, and then click Find: 5. Click the user's Account name, and then click Manage site collection owners: 6. The site collection owners dialog box displays. In the Site Collection Administrators field, add the service account with administrative privileges or another account with administrative privileges: Type the account name, and then click the Verify User ( ) icon, or Click the Directory ( ) icon, and navigate to and select the account from the directory: Click OK. The service account or administrative account added as the user's Site Collection Administrator can now view the user's entire OneDrive account. Repeat Steps 3 through 7 for each user who's OneDrive for Business data is to be backed up with Barracuda Cloud-to-Cloud Backup. Step 3. Set Up Impersonation Permissions Use these steps when adding all future users. 4 / 6

5 Complete the following steps to set up impersonation permission for the service account on all newly created OneDrive users: 1. Log in to your Office 365 Management Panel using the service account created in Step 1. Create a New Service Account. 2. In the left pane click Admin centers > SharePoint, and click user profiles. 3. In the My Site Settings section, Click Setup My Sites. 4. In the My Site Secondary Admin section, click Enable My Site secondary admin. 5. In the Secondary admin field, type the username of the newly created service account. 6. Click OK. 5 / 6

6 Figures 6 / 6