OneDrive (App-Only)
Service-account connection to a specific user's OneDrive via an Azure app.
Fields
| Field | Description | Required |
|---|---|---|
| Client ID | Application (client) ID of the Azure App Registration. | Yes |
| Client Secret | The client secret Value (not the Secret ID). | Yes |
| Tenant ID | Directory (tenant) ID of your Microsoft 365 organization. | Yes |
| Default User (UPN or ID) | Whose OneDrive to access (userPrincipalName or object ID). Nodes can override per-node. Requires Files.Read.All / Files.ReadWrite.All application permissions. | Yes |
Register an Azure App
- In the Azure Portal, go to Microsoft Entra ID → App registrations → New registration (single tenant).
- Under API permissions, add the Microsoft Graph Application permissions
Files.Read.AllandFiles.ReadWrite.All, then Grant admin consent. - Under Certificates & secrets, create a client secret and copy its Value.
- Copy the Application (client) ID and Directory (tenant) ID from the Overview page.
Default User
App-Only has no signed-in user, so you must specify whose OneDrive to access — the user's userPrincipalName (e.g. mark@neosky.ai) or object ID. The OneDrive node can override this per-node with its User field.
Testing the Connection
Test Credential mints an app token and probes /users/{user}/drive. A 404 means the user/UPN is wrong; a 403 means the app lacks Files.* permission or admin consent.