Setting up OneDrive AI Connector on Egnyte

Egnyte offers its users the ability to connect to external AI connectors in order to bridge the gap between Egnyte and widely used productivity tools.

This guide walks Egnyte admins through connecting OneDrive as an AI Connector using the Model Context Protocol (MCP). Once configured, users can now search and read documents directly from Egnyte's AI Assistant.

Prerequisites

• Microsoft 365 Tenant with Entra/Azure AD Global Admin access
• Egnyte admin privileges (Power User role or higher)
• OneDrive connector already visible in the Egnyte connectors library as a pre-loaded connector

Tenant Admin Consent (Pre-Step for OneDrive Connector)

Before the connector can be published to end users, a Microsoft 365 tenant admin must grant tenant-wide consent to the OneDrive MCP by Egnyte app. This lets the app access the Microsoft Graph permissions it needs on behalf of the whole organization.

1. Open the consent link: Grant admin consent and sign in as a Global Administrator.
   
2. Review the list of permissions in the dialog.
   
3. Select Accept to confirm. This gives the app access to your organization's data through the listed permissions.

The app requests scopes that individual non-admin users cannot consent to on their own. Without tenant-wide consent, every non-admin user will see Microsoft's Need admin approval screen and will be blocked from authenticating.

Refer to these steps to use a pre-loaded connector, publish the connector, editing the connector, along with the other admin actions. 

Configure Tool Permissions

The following tools are available in the OneDrive connector for configuration:

• onedrive_get_onedrive: Retrieves information regarding the owner, storage quotas, and associated metadata for the OneDrive account.
• onedrive_find_file_or_folder: Utilizes free-form text to locate specific items within the personal drive, proving effective when the path is unknown.
• onedrive_get_folder_children: Provides a paginated list of internal contents, defaults to the root directory if no specific identifier is provided.
• onedrive_get_file_or_folder_metadata: Accesses detailed properties including file size, direct links, creation dates, and authorship details.
• onedrive_get_file_or_folder_metadata_by_url: Obtains metadata through a provided share link, contingent upon the user possessing existing access rights.
• onedrive_read_text_file: Extracts content from text-based files under 5MB, such as Markdown, CSV, or various configuration and source formats.
• onedrive_read_binary_file_as_base64: Parses binary documents like PDFs, images, or Word files under 5MB into a base64 encoded string format.

Admins can set permissions for each tool by selecting either Allow unsupervised (checkmark icon)or Always ask permission (info icon).

Additional Information And Resources

Consideration

Users Previously Granted Individual Consent

Some users may have already granted individual consent to the application prior to tenant-wide approval. Egnyte’s authentication flow supports this scenario. Once tenant admin consent is granted, users can proceed without any additional action.

Troubleshooting

Need Admin Approval Error

If users see a Need admin approval message during authentication, it means tenant-wide admin consent for Microsoft Graph permissions has not yet been granted. A Microsoft 365 tenant admin must approve access by visiting their admin portal

OAuth Authentication Fails

Authentication may fail if admin consent is incomplete or still propagating. After granting consent, allow a few minutes for changes to take effect and retry. Also ensure the required Microsoft Graph permissions are correctly configured.

Tools Return Empty Results or No Access Errors

If tools return no results, it may be due to OneDrive or Microsoft Graph permission constraints. The connector only returns data that the user has access to in OneDrive. Verify that the user has access to the relevant content and retry if needed.