Search <book_title>...

Arctera Insight Information Governance Administrator's Guide

Last Published: 2025-11-24

Product(s): Data Insight (7.2)

Platform: Windows

Section I. Getting started
1. Introduction to Arctera Insight Information Governance administration
  1. About Arctera Insight Information Governance administration
    1. Operation icons on the Management Console
    2. Information Governance administration tasks
2. Configuring Information Governance global settings
Section II. Configuring Information Governance
Section III. Configuring native file systems in Information Governance
Section IV. Configuring SharePoint data sources
1. Configuring monitoring of SharePoint web applications
2. Configuring monitoring of SharePoint Online accounts
Section V. Configuring cloud data sources
Section VI. Configuring Object Storage Sources
1. Amazon S3
Section VII. Health and monitoring
1. Using Arctera Insight Information Governance dashboards
2. Monitoring Information Governance
Section VIII. Alerts and policies
1. Configuring policies
Section IX. Remediation
1. Configuring remediation settings
Section X. Reference

Adding SharePoint Online accounts

Information Governance discovers and scans the data residing in the SharePoint Online accounts that are configured on the Management Console.

Note:

Information Governance disables addition of SharePoint Online accounts if you do not have a valid cloud license or if your license has expired. Also, Information Governance will not discover new accounts that have been added after the expiry of the license.

To add a SharePoint Online account

In the Console, click Settings > SharePoint Sources.
The SharePoint page displays the list of configured web applications and Online accounts.
Click Add SharePoint Source > SharePoint Online Account.
On the Add New SharePoint Online Account page, specify the URL of the account you want to add and enter the properties.
Click Save.

Note:

For verification of the permission for the newly added SharePoint account, wait till the account's next incremental or full scan, triggered after Local User Scan. By default, LocalUserScanJob runs at 12.30a.m every day on the Collector node. You can manually run the job by navigating to Settings >> Information Governance Servers >> Server >> Jobs >> Select LocalUserScanJob >> Actions >> Run

Add/Edit SharePoint Online account options

Use this dialog box to add a new SharePoint Online account to Arctera Insight Information Governance or to edit the configuration of an existing account.

Table: Add/Edit SharePoint Online account options

Field	Description
SharePoint Online Account URL	Enter the URL of the SharePoint Online URL that you want Information Governance to monitor. For example, `https://myaccount.sharepoint.com`
Collector	Do the following: Click Select Collector. The Select Collector pop-up displays the configured Collectors that are available for selection. Review the performance parameters such as disk and CPU utilization and backlog of files accumulating on the configured nodes. It is recommended that you assign a node on which the resource utilization is low. Click Select to assign the Collector to the filer. Information Governance connects to the SharePoint server from the Collector node. It is recommended to choose the Collector worker node that is close in proximity to the SharePoint Online account server.
Indexer	Do the following: Click Select Indexer. The Select Indexer pop-up displays the configured indexers that are available for selection. Review the performance parameters such as disk and CPU utilization and backlog of files accumulating on the configured nodes. You can also view the number of devices, shares or site collections assigned to each configured node. It is recommended that you assign a node on which the resource utilization is low. Click Select to assign the Indexer to the filer. Events and metadata that are collected from the site collections are processed and stored on the Indexer node.
Client ID Client Secret Key Tenant ID	The client ID is the unique application ID assigned when you create and register an app with Microsoft. You can add up to 5 client IDs. Client Secret Key: In the SharePoint App, navigate to the Certificates & secrets page. There is a code in the Value column under the Client secret section. You need to use that code as a Client Secret Key while configuring a SharePoint account in Information Governance. Tenant ID: This is an unique ID assigned to an organization If you have missed copying the code, go back to the Certificates & secrets page in the SharePoint app and click + New client secret. Copy the code in the Value column and use it as a Client Secret Key in Information Governance. You can add up to 5 client secret keys. Follow the procedure described in the following topic to get these details: Note: Microsoft servers might briefly block certain client credentials for initiating frequent requests. In such scenarios, Information Governance fails to retrieve data from the Microsoft servers. To eliminate such delay, you can add up to 5 client credentials to the SharePoint Online account. If one client credential is blocked by Microsoft, another client credential will be used to fetch data. Add one client ID, Client Secret Key, authorize the app and click Add More Apps to add another set of client credentials.
Authorize access	Do the following: Click Authorize. This invokes the application authorized to access the SharePoint Online account. Note: Ensure that you use the credentials of a Microsoft 365 user with Microsoft Minimum Privileges user role for authorizing Information Governance. This step creates an authorization token that is stored as a named credential in the Information Governance configuration. You will be redirected to the Information Governance console to complete the rest of the configuration. Information Governance can now access the user, folder and file metadata and the information about the activities performed on these files and folders. Note: After authorization, do not update the same set of client and secret key.
Automatically discover and add site collections in this SharePoint Online account	This check box is selected by default. This option allows you to automatically include all site collections in the selected SharePoint Online account for the purpose of monitoring. Clear the check box to add site collections manually. You can do this from the SharePoint Online account details page. Discovery of site collections takes place as soon as you add a SharePoint Online account and then twice each day at 2:00 A.M. and 2:00 P.M.
Exclude following site collections from discovery	Enter the details of the site collections which should not be included during discovery. This option is available when you select Automatically discover and add site collections in the added SharePoint Online Accounts. Specify comma separated patterns that you want to ignore. Patterns can have 0 or more wildcard * characters. For example, https://onlineaccount1/sites/test* ignores site collections https://onlineaccount1/sites/testsite1 and https://onlineaccount1/sites/testsite2.
Monitor SharePoint accesses to this SharePoint Online account	By default, Microsoft SharePoint Online Event Monitoring is enabled. If disabled, select this check box to enable event monitoring on the SharePoint Online account. You must manually enable auditing in the Microsoft 365 Admin Center to enable Information Governance to collect audit logs for the SharePoint Online account.
Enable Scanning for this SharePoint Online account	Select the check box to enable SharePoint Online account scanning according to the specified schedule.
Scanning schedule (for full scans)	Select one of the following to define a scanning schedule for the SharePoint Online account: Use the Collector's scanning schedule. Define custom schedule. From the drop-down, select the appropriate frequency. Arctera Insight Information Governance periodically scans site collections to obtain file metadata. Each Collector worker node by default initiates a full scan of the SharePoint device at 11:00 P.M. each night. Note: You can also customize the schedule for each site collection using the Add/Edit Site Collection dialog box.
Scan newly added site collections immediately	Select this option to scan newly added site collections immediately instead of waiting for the regular scan schedule. Scanning will still proceed only when scanning is permitted on the Collector node.
Fetch Microsoft Labels	Check the box if you want to fetch Azure Information Protection (AIP) and Microsoft Sensitive labels for this SharePoint Online account. AIP label is a functionality that enables organizations to classify documents and emails in Microsoft 365.
Scan all versions of the documents	Check the box if you want to scan all versions of the document. If unchecked, only the latest version of the document will be scanned. Note: If you select this option, scanning will be at least 20% slower.