SOLVED

High Level Administration of OD4B

%3CLINGO-SUB%20id%3D%22lingo-sub-6165%22%20slang%3D%22en-US%22%3EHigh%20Level%20Administration%20of%20OD4B%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6165%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20just%20now%20starting%20to%20use%20OD4B%20in%20our%20organization%20and%20one%20feature%20that%20was%20requested%20from%20management%20is%20that%20they%20want%20to%20be%20able%20to%20view%20their%20staff's%20OD4B%20files.%20From%20the%20standpoint%20of%20local%20storage%2C%20this%20was%20pretty%20simple%20with%20share%20permissions.%20With%20OD4B%2C%20the%20best%20I%20have%20found%20so%20far%20is%20by%20editing%20each%20user's%20%22User%20Profile%22%20under%20the%20SharePoint%20admin%20center.%20As%20one%20can%20imagine%2C%20that%20is%20time%20consuming%20and%20just%20more%20steps%20that%20is%20needed%20in%20the%20process%20of%20setting%20up%20new%20accounts.%26nbsp%3B%26nbsp%3B%20Is%20there%20a%20better%20way%3F%20Ideal%2C%20as%20an%20administrator%2C%20we%20need%20to%20be%20able%20to%20view%20all%20users%20files%2C%20just%20as%20we%20can%20on%20a%20local%20file%20share.%20That%20is%20bare%20minimal.%20I%20understand%20I%20can%20create%20eDiscovery%20but%20that%20is%20more%20for%20compliance.%26nbsp%3B%20For%20managers%2C%20it%20would%20be%20great%20if%20OD4B%20would%20%22automatically%22%20provide%20managers%20access.%20I%20dont%20know%20if%20that%20is%20possible%20in%20the%20current%20form.%20The%20manager%20is%20defined%20as%20part%20of%20a%20user%20in%20Active%20Directory.%26nbsp%3B%20Probably%20wishful%20thinking%20here.%26nbsp%3B%20Thanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-6165%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOneDrive%20for%20Business%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-6243%22%20slang%3D%22en-US%22%3ERe%3A%20High%20Level%20Administration%20of%20OD4B%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6243%22%20slang%3D%22en-US%22%3E%3CP%3EYes%2C%20the%20User%20Profile%20in%20SharePoint%20is%20where%20you%20can%20give%20someone%20access.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-6241%22%20slang%3D%22en-US%22%3ERe%3A%20High%20Level%20Administration%20of%20OD4B%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6241%22%20slang%3D%22en-US%22%3EExcellent.%20Thanks%20for%20your%20help.%20And%20I%20assume%2C%20if%20we%20need%20to%20give%20a%20Manager%20access%20sooner%2C%20you%20use%20the%20User%20Profile%20under%20SharePoint%20Admin%20Portal%2C%20correct%3F%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20Microsoft%20reads%20these%2C%20I%20would%20like%20to%20request%20a%20high%20view%20hierarchy%20of%20all%20our%20users%20OneDrive%20files.%20As%20administrators%2C%20I%20still%20like%20to%20view%20files%20or%20access%20files%20on%20a%20fly%20as%20we%20would%20with%20a%20typical%20file%20share.%20Thanks%20again!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-6240%22%20slang%3D%22en-US%22%3ERe%3A%20High%20Level%20Administration%20of%20OD4B%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6240%22%20slang%3D%22en-US%22%3E%3CP%3EManager%20is%20determined%20by%20Active%20Directory.%3C%2FP%3E%3CP%3EFor%20us%2C%20we%20remove%20the%20license%20after%20the%2030%20day%20period%20after%20the%20employee%20leaves%20(just%20makes%20it%20simplier).%20That%20is%20when%20the%20manager%20will%20automatically%20get%20a%20notice.%20If%20the%20manager%20wants%20access%20earlier%20they%20can%20request%20it%20and%20we'll%20give%20it%20to%20them%20(none%20have%20ever%20asked).%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-6239%22%20slang%3D%22en-US%22%3ERe%3A%20High%20Level%20Administration%20of%20OD4B%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6239%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20mentioned%20Managers%20gain%20access%20automatically%20when%20a%20person%20leaves.%20How%20is%20that%20determined%3F%20Do%20I%20simply%20remove%20the%20O365%20license%20from%20the%20user%20account%3F%20How%20does%20it%20know%20who%20the%20manager%20is%3F%20Is%20that%20pulling%20from%20the%20Manager%20field%20in%20AD%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-6168%22%20slang%3D%22en-US%22%3ERe%3A%20High%20Level%20Administration%20of%20OD4B%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-6168%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20are%20correct%20that%20isn't%20currently%20available%20for%20OneDrive.%3C%2FP%3E%3CP%3EI%20think%20you%20might%20be%20better%20at%20getting%20folks%20to%20do%20group%20work%20files%20in%20SharePoint%20and%20leave%20their%20%22personal%22%20files%20in%20OneDrive.%20That%20way%20manager's%20really%20don't%20have%20a%20need%20to%20be%20looking%20into%20OneDrive%20and%20can%20focus%20on%20SharePoint.%3C%2FP%3E%3CP%3EWhen%20an%20employee%20leaves%20the%20manager%20will%20gain%20access%20automatically%20to%20OneDrive.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Regular Contributor

We are just now starting to use OD4B in our organization and one feature that was requested from management is that they want to be able to view their staff's OD4B files. From the standpoint of local storage, this was pretty simple with share permissions. With OD4B, the best I have found so far is by editing each user's "User Profile" under the SharePoint admin center. As one can imagine, that is time consuming and just more steps that is needed in the process of setting up new accounts.   Is there a better way? Ideal, as an administrator, we need to be able to view all users files, just as we can on a local file share. That is bare minimal. I understand I can create eDiscovery but that is more for compliance.  For managers, it would be great if OD4B would "automatically" provide managers access. I dont know if that is possible in the current form. The manager is defined as part of a user in Active Directory.  Probably wishful thinking here.  Thanks.

5 Replies
Highlighted

You are correct that isn't currently available for OneDrive.

I think you might be better at getting folks to do group work files in SharePoint and leave their "personal" files in OneDrive. That way manager's really don't have a need to be looking into OneDrive and can focus on SharePoint.

When an employee leaves the manager will gain access automatically to OneDrive.

Highlighted

You mentioned Managers gain access automatically when a person leaves. How is that determined? Do I simply remove the O365 license from the user account? How does it know who the manager is? Is that pulling from the Manager field in AD? 

 

Thanks.

Highlighted
Best Response confirmed by Jeff Harlow (Regular Contributor)
Solution

Manager is determined by Active Directory.

For us, we remove the license after the 30 day period after the employee leaves (just makes it simplier). That is when the manager will automatically get a notice. If the manager wants access earlier they can request it and we'll give it to them (none have ever asked).

Excellent. Thanks for your help. And I assume, if we need to give a Manager access sooner, you use the User Profile under SharePoint Admin Portal, correct?

If Microsoft reads these, I would like to request a high view hierarchy of all our users OneDrive files. As administrators, I still like to view files or access files on a fly as we would with a typical file share. Thanks again!
Highlighted
Best Response confirmed by Jeff Harlow (Regular Contributor)
Solution

Yes, the User Profile in SharePoint is where you can give someone access.