mackinac

Thank you Christopher for the response. I agree with you, chances are the software doesn't do or access anything outside of what it needs to, but if I am granting permissions to an app that CAN, that's all it takes to violate fundamental information security principles.

Hello I have discovered Covecube and so far am very impressed. I want to use CloudDrive to mount a drive on my onedrive for business account to be used with DrivePool for duplication of folders, but before I do so I would like to know the details of permissions I am granting to the CloudDrive API. I have an E3 plan from work and I'd like to use it as a place to duplicate files via drivepool for backup purposes. When I create the Onedrive for Business drive, i am presented with a security permissions page from microsoftonline.com that lists these permissions being granted: I am concerned about authorizing this because it seems to infer it would be able to "read items in all site collections" which would infer I am granting permissions for cloud drive to access, via api, all of the sharepoint collections my account has access to. Obviously, I want to limit the access cloud drive has to just my one drive, or collection where my one drive exists. Is it possible to get a more thorough description of how cloud drive works with one drive for business and what it has access to and what it doesnt?