The issue may be encountered when Cloud App Security (CAS) did not receive a notification at the time of file modification, commonly due to an incomplete provisioning process.

To address the issue, ensure that you have granted Cloud App Security (CAS) permissions to receive notifications from Microsoft upon any change to files on OneDrive/Sharepoint and Microsoft Teams.

For detailed steps on provisioning OneDrive/Sharepoint and Microsoft Teams, refer to this documentation.

To verify that CAS permission is granted, access the URL below:

{sharepoint_admin_site}/_layouts/15/TA_AllAppPrincipals.aspx

For example: Change https://exampleadmin.sharepoint.com/_layouts/15/online/AdminHome.aspx#/home to https://example-admin.sharepoint.com/_layouts/15/AppInv.aspx

If you need further assistance, contact Trend Micro Technical Support.