Cloud Drive Mapper accesses Office 365 APIs in order to map drives to OneDrive for Business, SharePoint Online and MS Teams storage. In line with Microsoft's latest recommendations, Cloud Drive Mapper requires 'permission' to access these APIs. This gives Office 365 customers (like you) more control and visibility over what their connected applications (like CDM) can access. It also ensures connected applications preserve conditional access settings and MFA you may have configured within Azure or with another identity provider.


For more information on AAD Enterprise Application permissions as well as which permissions Cloud Drive Mapper uses and why, please read this more detailed article. 

Cloud Drive Mapper has two modes:

  1. Advanced mode (default, recommended). This is the default mode. It requires an AAD Admin to grant and configure the AAD permission as per the details below.
  2. Basic mode (formerly 'Standard mode'). Basic mode uses a reduced number of permissions, which may be useful to customers who don't need the full functionality of Cloud Drive Mapper and would rather reduce the permissions footprint of CDM. Basic mode also only requires user-level permissions which can be set by users themselves (although it can also be set by admins too, which is also recommended). However, this mode can only map drives to OneDrive for Business and static URL SharePoint drives, but none of CDM's other drive-types or advanced features.


We have moved the standard mode instructions from this article, but should you still require them they are available in a separate article here.


Advanced mode (recommended)

A number of Cloud Drive Mapper's advanced features including SharePoint drives, our Converged Drive feature and our user-configured drives feature require advanced admin-granted permissions.


To grant admin permissions for advanced mode:

  1. Click this link and follow the steps until you see the success screen
  2. Navigate to Azure Active Directory Admin Center > Dashboard > Enterprise Applications
  3. You should see Cloud Drive Mapper listed in the applications. Click into our application in the list, and then navigate to the Permissions tab via the left-hand menu.
  4. You should see a button that says [Grant admin consent for IAM Cloud]. Click the button, and that's it.



This is what the experience looks like: 









If you need any assistance, please contact support@iamcloud.com and we'll be happy to help.