Arctera Insight Information Governance

Last Published:
Product(s): Veritas Alta Data Insight (1.0)
Platform: Windows
  1. About Arctera Insight Information Governance
    1.  
      About Arctera Insight Information Governance
  2. Dashboard
    1.  
      About Arctera Insight Information Governance Dashboard
    2.  
      Storage Utilization Trends
  3. Navigating through Arctera Insight Information Governance
    1.  
      Left Navigation Panel Overview
  4. Workspace
    1.  
      About Arctera Insight Information Governance Workspace
    2.  
      Data
    3.  
      Users
    4.  
      Groups
  5. Policy
    1.  
      About policy
    2.  
      Creating Policies
    3.  
      Managing Policies
  6. Installing Collector Node
    1.  
      About Collector node
    2.  
      Downloading and Installing Arctera Insight Information Governance Collector
  7. Collector
    1.  
      Collector
    2.  
      About servers
  8. Data Sources
    1.  
      Data Sources
    2. Filers
      1.  
        Adding filers
      2.  
        Viewing configured filers
      3.  
        Editing filer configuration
      4.  
        Managing filers
      5.  
        Monitored Shares
      6.  
        About disabled shares
    3. SharePoint Online
      1.  
        About SharePoint Online account monitoring
      2.  
        Registering Information Governance with Microsoft to enable SharePoint Online account monitoring
      3.  
        Configuring application without user impersonation for M365
      4.  
        Creating an application in the SharePoint Admin Center
      5.  
        Add SharePoint Online accounts
      6.  
        Managing Site Collections
      7.  
        Monitored Site Collections
    4. OneDrive
      1.  
        Configuring OneDrive account
      2.  
        Registering Information Governance with Microsoft to enable OneDrive account monitoring
      3.  
        Configuring application without user impersonation for M365
      4.  
        Add/Edit OneDrive account
      5.  
        Monitored Cloud Accounts
  9. Directory Services
    1.  
      About Active Directory Services
    2.  
      Registering Information Governance with Microsoft to scan Azure AD
    3.  
      Add/Edit Azure active directory service
  10. Health and Monitoring
    1.  
      Scan Status
  11. Classification
    1.  
      Requests
    2.  
      Configuration
    3.  
      Setting up Classification
  12. File Groups
    1.  
      About File group
    2.  
      Configuring File group
  13. Reports
    1.  
      About Reports
  14. Workflows
    1.  
      Workflows
    2.  
      Task
  15. Data Remediation
    1.  
      Delete Files Configuration
  16. Users and Access
    1.  
      Users and Roles
    2.  
      Credentials

Configuring application without user impersonation for M365

Setting DisableCustomAppAuthentication property for the tenant

To set the property DisableCustomAppAuthentication,

  1. Open Windows Powershell as Administrator.
  2. Add Install-Module Microsoft.Online.SharePoint.PowerShell and press Enter.
  3. For importing NuGet file prompt, type Y and press Enter.
  4. For Untrusted repository prompt, type Y and press Enter.
  5. Add Connect-SPOService -url https://<your URL>-admin.sharepoint.com and press Enter.
  6. Provide username and password required to authenticate.
  7. Add Set-SPOTenant -DisableCustomAppAuthentication $false and press Enter.

After completing the steps, DisableCustomAppAuthentication property will be set to False. To verify, add get-spotenant in the same window and press Enter. A list will appear in the same window. Search the list and verify if DisableCustomAppAuthentication property is set as False.

After setting the property, you need to add the application to the lookup.

To add the application to the lookup,

  1. Copy the Client ID of the app created in the Azure portal App
  2. Navigate to https://<organization-name>-admin.sharepoint.com/_layouts/15/appinv.aspx
  3. Paste the Client ID copied from the Azure portal App in the App Id field
  4. Click Lookup
  5. Add localhost.com in the App Domain field
  6. Add https://localhost.com/default.aspx in the Redirect URL field
  7. Add following XML in the App's Permission Request XML
    <AppPermissionRequests AllowAppOnlyPolicy="true">
    <AppPermissionRequest Scope="http://sharepoint/content/tenant"
    Right="FullControl"/>
    </AppPermissionRequests>
  8. Click Create
  9. Click Trust It

You will be redirected to the SharePoint admin center.

Configuring an administrator account for Information Governance

Information Governance uses a Global administrator account to discover the site collections and scan metadata and a SharePoint administrator account to fetch the access events from the configured SharePoint Online account. Global administrator accounts must have full control over the site collections that you want Information Governance to monitor. You must configure the Global administrator, as owner for team site collections, on the M365 interface and assign the administrative privileges for the target site collections.

To add a SharePoint administrator

  1. Log on to M365 using the Global admin credentials.
  2. On the SharePoint admin center page, click Users > Active users > Add a user.

    The New User pop-up windows opens.

  3. Enter the name of the user and other properties as appropriate.
  4. In the Roles section, select Customized administrator > SharePoint administrator.
  5. Click Add.

The SharePoint administrator account collects metadata about site collection content , and gathers audit data from SQL Server databases for SharePoint when it is assigned administrative privileges for the target site collections. It must also have full control permissions on the configured site collections and the site collections that are incrementally included to the SharePoint account. For team site collections, the SharePoint administrator should be an owner.

The Minimum Privilege user has access to all features in the Admin center and can perform all tasks in the M365 Admin center.

To assign owners for team site collections

  1. On the SharePoint admin center page, go to Groups > Groups, and select the Group Name to which you want to assign owners.
  2. In the Group details pane on the right-hand-side, click Edit for the Owners entry.
  3. In the Edit pane, click Add owner and select a user having Minimum Privilege user credentials.
  4. Click Save.