The steps below shows how to provision a SharePoint Online Delegate Account for SharePoint Online first, and then OneDrive from Cloud App Security web console:

1. Log on to the Cloud App Security management console.
2. Perform the following steps to provision for SharePoint Online.
   1. Hover over SharePoint Online, and click Provision.

      

      ^{Click the image to enlarge.}

   2. Go to the Delegate Account tab.

      

      ^{Click the image to enlarge.}

   3. Specify the Global Administrator credentials (email address and password) and click Verify.

      

      ^{Click the image to enlarge.}

       

      • Trend Micro does not save the Global Administrator credentials. They are used only once to provision the necessary Delegate Accounts.
      • (Optional) The Promote all Delegate Accounts to the Global Administrator admin role (Recommended) option can be enabled. This option promotes Delegate Accounts to Global Administrator privileges, which will allow automatic syncing of changes. If left disabled, the Global Administrator credentials will be required each time you want to synchronize changes.

       
   4. Choose the synchronization targets:

      

      ^{Click the image to enlarge.}

      • Select Synchronize all targets, then proceed to Step E.
      • Choose Selected SharePoint site collections of your organization, then do the following:
        1. Sign in to Microsoft 365 admin center using the Global Administrator account, and go to Admin centers > SharePoint > site collections from the left navigation.
        2. Verify and add the URLs to protect one by one by copying a URL, pasting it into the text box, and clicking Add.
            

           • A maximum of 100 site collection URLs can be added.
           • When needed, existing URLs can be removed from this section.

            
        3. Proceed to Step E.
   5. Click Submit.

      

      ^{Click the image to enlarge.}

   6. Hover over the ring icon in the upper-right corner of the management console. If the message "SharePoint Online protected." appears on the Notifications screen, the provisioning is successful.

      

      ^{Click the image to enlarge.}

3. Perform the following steps to provision for OneDrive:
   1. Hover over OneDrive, and click Provision.

      

      ^{Click the image to enlarge.}

   2. Go to the Delegate Account tab.

      

      ^{Click the image to enlarge.}

   3. Specify the Global Administrator credentials (email address and password) and click Verify.
       

      • Trend Micro does not save the Global Administrator credentials. They are used only once to provision the necessary Delegate Accounts.
      • (Optional) Enable the Promote all Delegate Accounts to the Global Administrator admin role (Recommended) option. This option promotes Delegate Accounts to Global Administrator privileges, which will allow automatic syncing of changes. If left disabled, the Global Administrator credentials will be required each time you want to synchronize changes.

       

      

      ^{Click the image to enlarge.}

   4. Choose the synchronization targets:

      

      ^{Click the image to enlarge.}

      • If the Delegate Account is already provisioned for SharePoint Online, etis option is disabled because it follows what is selected during provisioning for SharePoint Online. Proceed to Step E.
      • If the Delegate Account is not provisioned for SharePoint Online yet, do the following:
        • Select Synchronize all targets, then proceed to Step E.
        • Choose Selected OneDrive users of your organization that have OneDrive sites, then do the following:
          1. Sign in to Microsoft 365 admin center using the Global Administrator account, and go to Admin centers > SharePoint > site collections from the left navigation.
          2. Verify and add the URLs to protect one by one by copying a URL, pasting it into the text box, and clicking Add.
              

             • A maximum of 100 users can be synchronized.
             • When needed, users can be removed from this section.

              
          3. Proceed to Step E.
   5. Click Submit.

      

      ^{Click the image to enlarge.}

   6. Hover over the ring icon in the upper-right corner of the management console. If the message "SharePoint Online protected." appears on the Notifications screen, the provisioning is successful.

      

      ^{Click the image to enlarge.}

If only some targets were selected to synchronize during provisioning, Cloud App Security is also able to extend its protection to all targets under the corresponding service by enabling you to manually synchronize all targets:

1. On the Notifications screen, click Extend to protect all your Office 365 service targets.
2. On the screen that appears, view the instructions and click Submit.
3. Go to Advanced Threat Protection or Data Loss Prevention, and open an ATP or DLP policy of each service you want to extend the protection to, that is, Exchange Online, SharePoint Online, or OneDrive.
4. Select the General tab and click the Click here link to manually synchronize all your targets