SharePoint 2019 (On-Premises) Connector

Overview

Used for OneTrust Data Discovery, the SharePoint 2019 is an on-premises connector that is stored locally on a customer's server. This means updates including any periodic updates should be handled by the organization's internal IT team.

Note:

This connector is currently under Public Preview. Contact OneTrust Support to request early access.

Pod Residency

app-scanner

Connection Method

SharePoint API

Note:

Please note that the Microsoft Graph API is not available for on-premisess connectors.

Supported Scan Actions

Scan Type

Description

Catalog

This scan type will fetch the list of Subsites, Document Library and Folder/Files under Document Library. It collects the Metadata also for these objects and send back to Main APP.

Catalog & Scan

This will fetch the list of Subsites, Document Library and Folder/Files present in those buckets. The connector collects the metadata and goes for content extraction after that. It will return personally identifiable information (PII), data elements (DE), and Terms as per the classification label identified.

Credential and System Permissions

OneTrust recommends to adhere to your organization's security and infrastructure policy and include system engineer resources or other qualified subject matter experts to set up credentials on data sources. For specific instructions for how to enable these credentials, refer to your data source's implementation documentation, knowledge base and/or support resources.

This connector uses Windows New Technology LAN Manager (NTLM) for authentication. The NTLM user must be in a group that has access or direct read-access to every site specified.

Sample JSON to be added to a vault (site url list is found in the SharePoint On-Premises console):

JSON 
{
"host_address": "http://your_host_name/",
"password": "your_password",
"site_url_list": "sites/sampleSiteA,sites/sampleSiteB",
"username": "domain_name\username"
}

Scan Profile Support

Note:

For additional details on scan profile configuration and management, see Setting Up Scan Profiles.

Scope

Field
Description
Mix and Max File Size

You can provide the Minimum and Maximum file size with appropriate unit to be scanned in this field. By default, if these fields are left empty, there will not be any limit on file size for the Catalog.

Include/Exclude File

You can provide the File extensions in this field which you want to include or exclude. These extensions should be provided in comma separated format.

Include/Exclude Paths

  • Site: Provide the Site name which needs to be included/excluded.

  • Subsite: Provide the Subsite name which needs to be included/excluded. If a nested Subsite needs to be included or excluded, it can be provided the name as parentSubSite/childSubSite.

  • Document Library: Provide the Document Library name which needs to be included/excluded.

  • Folder: Provide the Folder path which needs to be included/excluded.

  • File: Provide the File name which needs to be included/excluded.

Note:

Wildcards are supported for this connector's scan profile.

Collected Objects & Fields

  • Sites and Subsites

  • Drive Items

  • Folders

  • Files