We have a governance requirement to monitor external sharing from ODFB. We have a script that runs daily to pull down SPO internal sharing activity that previously would include ODFB. We had to add our process account to each ODFB site collection as SCA in order to ready the file sharing metrics. Once sharing metrics were gathered, we would remove the process account as SCA. This caused some issues with ODFB indexing as each change time we change permission, the indexing was impacted. This process is no longer used.
I've seen some examples where Azure apps can be granted full control access to SP site collections without user intervention. Is the same possible with ODFB where we could grant an app elevated permission in Azure to inventory sharing links in all ODFB sites?
