OneDrive setup guide

Agents find, read and write your company's documents and files.

Ways to connect

Company admins connect apps, on the Integrations page in Everdeck: open OneDrive, choose one of the ways below, follow its steps and fill in its fields. Everdeck checks what you enter before it saves anything, and asks you to confirm it’s you (your second factor) before you type any secret. How connecting works.

Your Microsoft Entra app

Your OAuth app.

This way signs in with an OAuth app you create for OneDrive, as its steps describe: Everdeck never uses an app of its own. Register this redirect URI with your app:

https://everdeck.io/api/oauth/callback

Then save the app’s client ID and secret in Everdeck, on the connect page or under OAuth apps, and sign in.

1. Sign in to the Microsoft Entra admin center (https://entra.microsoft.com) and open Entra ID > App registrations > New registration.
2. Name the app. Under Supported account types choose Single tenant only for a work or school OneDrive, or Personal accounts only for a personal OneDrive.
3. Under Authentication, add a Web platform with the redirect URI https://everdeck.io/api/oauth/callback.
4. Under Certificates & secrets, create a client secret and copy its Value (it is shown once).
5. Under API permissions, add Microsoft Graph delegated permissions Files.ReadWrite.All, User.Read and offline_access. If your organization restricts user consent, an admin must select Grant admin consent.
6. Copy the Application (client) ID, the client secret and the Directory (tenant) ID (or the word consumers for a personal OneDrive) into the form, then sign in as the account the agent should work as.

Field	What to enter
Directory (tenant) ID	Text. For example 00000000-0000-0000-0000-000000000000. From the app's Overview page. Enter consumers instead if the app is registered for personal Microsoft accounts only.

The scopes Everdeck asks for:

• offline_access
• User.Read
• Files.ReadWrite.All

Disconnecting deletes the tokens Everdeck saved. Remove Everdeck at https://myapps.microsoft.com (work or school accounts) or https://account.live.com/consent/Manage (personal accounts).

What agents can do

An agent uses an action only when its charter grants it, on the agent’s Tools tab, where you choose whether each one runs by itself (Auto), asks first or never runs. Each action has a risk tier: tier 3 actions, which customers or the public see, ask first unless you choose otherwise, and tier 4 actions (money, deleting things, access) always need a person. How tools and tiers work.

Actions marked Reads outside content return things people outside your company may have written. Agents treat what they read as information, never as instructions, and their riskier actions later in the same session need approval.

• Search filesTier 0 · ReadReads outside contentonedrive_search_files

  Search file names, metadata and contents in the user's OneDrive, including items others shared with them. Shared items carry a remoteItem with their own driveId and id.

• List a folderTier 0 · ReadReads outside contentonedrive_list_folder

  List the files and subfolders in a folder. Use folder_id root for the top of the drive.

• Get file detailsTier 0 · ReadReads outside contentonedrive_get_item

  Read a file or folder's details, including its location, size and who created and last changed it.

• Read a fileTier 0 · ReadReads outside contentonedrive_read_file

  Read a file's text. Word, Excel, PowerPoint, PDF and text files are converted to text.

• Upload or create a fileTier 2 · ReversibleReads outside contentonedrive_upload_file

  Create a file in a folder from text you write or from a file in the company's Spaces (up to 10 MB). An existing file with the same name is kept and the new one is renamed.

• Create a folderTier 2 · ReversibleReads outside contentonedrive_create_folder

  Create a folder inside another folder (root for the top of the drive).

• Rename a file or folderTier 2 · ReversibleReads outside contentonedrive_rename_item

  Give a file or folder a new name in the same place.

• Move a file or folderTier 3 · ExternalReads outside contentonedrive_move_item

  Move an item to another folder in the same drive. Needs approval by default because items take on the sharing of their new folder.

• Copy a fileTier 2 · ReversibleReads outside contentonedrive_copy_item

  Copy a file or folder (for example a template) into a folder under a new name. The copy finishes in the background.

• Create a sharing linkTier 4 · Money or irreversibleReads outside contentonedrive_create_sharing_link

  Create a view or edit link to a file or folder. anonymous links work for anyone who has them; organization links only for people in the same work or school organization.

• Share with a personTier 4 · Money or irreversibleReads outside contentonedrive_invite_people

  Give a person read or write access to a file or folder and send them an invitation email.

What can start work

These events from OneDrive can become tasks for your agents through Intake. How Intake works.

A file in the user's OneDrive was added, changed or deleted (checked every 5 minutes).

Connect OneDrive first. Then, on the Intake page, open Webhooks and sources, find it under Connector triggers and select Start watching. Then, on the Rules tab, select New rule to say which requests become tasks and who gets them.

Testing, problems and disconnecting

Everdeck checks the connection when you save it. On the connection’s page in Integrations, Test checks it again at any time.

If OneDrive later refuses the connection, for example because a key was deleted or a sign-in expired, the connection shows Needs attention on the Integrations page and the people who manage connections are told. Agents can’t use it until a company admin fixes it with Edit or Reconnect.

To stop agents using OneDrive, open the connection and select Disconnect. Agents stop using it at once and its saved credentials are deleted. What else happens depends on how it was connected: each way above says.