Connect to OneDrive for Business

Connect MyQ to OneDrive for Business to make users' storage available to supported MyQ workflows. OneDrive for Business can use the same Microsoft Entra application registration as Microsoft Entra ID and SharePoint Online. You can also use a dedicated application registration.

Before configuring OneDrive for Business, synchronize the users who will use the integration from Microsoft Entra ID. MyQ uses their Microsoft Entra object IDs to associate MyQ users with their OneDrive accounts.

Users created manually or synchronized from sources other than Entra ID will not have access to the OneDrive for Business destination.

See also:

Choose the OneDrive Access Model

MyQ can access OneDrive for Business either using application permissions or on behalf of individual Microsoft users.

Application-wide Access

With application-wide access, MyQ can access users' OneDrive storage without requiring each user to authorize the connection.

MyQ pairs each synchronized user with their OneDrive using the user's Microsoft Entra object ID. Automatic setup uses this access model. You can also configure it with a manually registered application.

Use application-wide access when users should be able to use OneDrive through MyQ without individually connecting their Microsoft accounts.

Individual User Access

With individual user access, each user authorizes MyQ to access their OneDrive. MyQ then accesses OneDrive on behalf of the signed-in user using delegated Microsoft permissions.

Users connect their OneDrive account from the Cloud Storage widget in the MyQ Web Interface. Use this model when users should explicitly authorize MyQ to access their OneDrive storage.

Add the OneDrive for Business Connection

Go to MyQ > Settings > Connections, click Add, and select OneDrive for Business.

Enter a Title for the connection and select:

Create automatically
Set up manually

Create Automatically

Select Create automatically to let MyQ create and configure the required Microsoft application.

Automatic setup applies the following temporary permissions:

Permission	API	Type	Purpose
`Application.ReadWrite.All`	Microsoft Graph	Delegated	Create or update the connector application credential.
`Directory.Read.All`	Microsoft Graph	Delegated	Read tenant information, including the default domain name.

Complete the Microsoft authorization process and save the connection.

MyQ configures application-wide access. Users synchronized from Microsoft Entra ID are automatically associated with their OneDrive for Business accounts and do not need to authorize it individually.

Set Up Manually

Select Set up manually if your organization manages Microsoft Entra application registrations directly. You can use the same application registration for Microsoft Entra ID, OneDrive for Business, and SharePoint Online, or a dedicated application for each service. The shared application must contain the permissions required by all integrations that use it.

See Manual Microsoft Entra App Registration

OneDrive for Business requires the following runtime permissions:

Permission	API	Type	Purpose
`Files.ReadWrite`	Microsoft Graph	Delegated	Read and write files available to the signed-in user.
`User.Read`	Microsoft Graph	Delegated	Identify the signed-in user.
`Files.ReadWrite.All`	Microsoft Graph	Application	Access users' files without individual user authorization.

Enter the application details in MyQ:

Title: type a title for the connection.
Directory (tenant) ID: the directory ID of your Entra app.
Application (client) ID: the application ID of your Entra app.
Security key: the Entra app client secret.
Application has access to OneDrive for Business of all users: select this option to use application-wide access. If this option is disabled, users must connect their OneDrive account themselves.

Save the connection.

Re-authorizing the OneDrive for Business Connection

Use the Re-authorize option to repeat the Microsoft authorization process for an existing connection.

Reauthorization can:

complete administrator consent that was not granted during the initial setup
create a new client secret
recreate a deleted enterprise application
change the connection between automatic and manual configuration

Reauthorization updates the existing enterprise application when it is still present. It does not create a duplicate.

To re-authorize, right-click on the connection. This opens the create connection dialog. You can repeat all the steps to create a new secret for the existing connection.

Pairing users with their OneDrive

If you used Automatic mode or selected Application has access to OneDrive Business of all users in the manual setup, users do not need to do anything to connect their OneDrive accounts. Users are paired with their OneDrive storage via their unique user ID (UUID). These are automatically imported only with the Entra ID user’s synchronization into MyQ. The UUID is synchronized from Central to Sites during user sync when Central users are synchronized with Entra ID. This process enables users at a Site to be automatically connected to their storage.

Next Steps

When a OneDrive for Business connection is configured, you can set it as a source or destination for printing and scanning.

See also: