Microsoft OneDrive for Business GCC High Connection

Learn how to create a connection to Microsoft OneDrive.


Overview

DryvIQ supports connections to Microsoft OneDrive for Business Government Community Cloud (GCC) High — an environment that provides compliance with US government requirements for cloud services platforms. The DryvIQ Microsoft OneDrive for Business GCC High connection enables you to analyze, migrate, copy, and synchronize files from your OneDrive account to cloud storage repositories and on-premises network file shares. DryvIQ creates the connection using the OAuth 2.0 flow to simplify login and connection management. You can use any administrator account with the proper privileges to manage Microsoft 365 configurations to create the connection. 

Creating a Connection

  1. Expand the Manage section in the left navigation menu.
  2. Click Connections.
  3. Click Add connection.
  4. Select Microsoft OneDrive for Business GccH as the platform on the Add connection modal.
  5. Enter the connection information. Reference the table below for details about each field.
  6. Click Sign in with Microsoft OneDrive for Business Gcch.
  7. Enter the email for the account being used to create the connection and click Next. You must use an administrator account with the proper privileges to manage OneDrive for Business configurations.
  8. Enter the password for the account and click Sign in.
  9. You will see a green "Connected” message at the bottom of the modal when DryvIQ establishes a connection. (If the connection fails, verify the information you entered.)
  10. Click Done to finish creating the connection.
Add Connection Modal for Microsoft for Business GCC High

 

Field Description Required
Display as

Enter the display name for the connection. If you will be creating multiple connections, ensure the name readily identifies the connection. The name displays in the application, and you can use it to search for the connection and filter lists.

 

If you do not add a display name, the connection will automatically be named using the URL. For example, OneDrive for Business GccH (https://mycompany-my.sharepoint.com/personal/user_mycompany_onmicrosoft_com). If you need to reference the connection by account, use the default name.

Optional
 
URL

Enter the URL of your OneDrive for Business account. This must be the full URL. If the connection fails, verify the URL. DryvIQ cannot create the connection if the URL is incorrect. 

 

You can find the URL by logging into Microsoft OneDrive for Business GCCH High using the account you want to use to create the connection. The URL in the address bar is the URL you need to use.

Required
Token endpoint This setting is rare for most Microsoft connections and can be left blank. If needed, your administrator will provide this value. Optional
Graph API endpoint This setting is rare for most Microsoft connections and can be left blank. If needed, your administrator will provide this value. Optional
External users notification

This indicates if you want to send notifications to external users. The default value is No, so notifications will not be sent. 

 

If you select Yes, notifications will be sent to external users when they have been granted access to content based on permissions.

Optional
Behavior When Deleting Items
 

Select the type of deletion DryvIQ should perform when deleting items: Permanent or Soft. 

 

Soft delete is the default behavior. A soft delete marks items as deleted. You can still access them to restore or permanently delete the items.

 

Permanent delete is the recommended behavior. A permanent delete removes the items. This deletion is not reversible.

Optional
 

Features and Limitations

Platforms all have unique features and limitations. DryvIQ’s transfer engine manages these differences between platforms, allowing you to configure actions based on Job Policies and Behaviors. The information below is platform-specific. Use the Platform Comparison‍ tool to see how your integration platforms may interact regarding features and limitations.

Supported Features Unsupported Features Other Features/Limitations
Account Map
See below for more information.
Mirror Lock Ownership‍  File Size Maximum‍: 250 GB Microsoft limit
DryvIQ uses a file maximum size of 249.999999 GB to ensure transfer. See below for additional file size limitations.
Author/Owner Preservation‍    Path Length Maximum‍: 400
File Lock Propagation‍    Restricted Types‍: N/A
Group Map‍    Segment Path Length‍: N/A
Metadata Map‍ 
See below for more information.
  Invalid Characters‍: |   "   \   /   :   *   ?   <   >
See below for more information.
Permission Preservation‍    Maximum number of files per folder: 5000 
Tags Map   Maximum Enterprise Keyword length: 255 characters 
Timestamp Preservation‍    Restricted characters in Enterprise Keywords: < and >
User Impersonation   No leading whitespace 
See below for more information.
Version Preservation
See below for more information.
  No trailing periods and whitespace. 
See below for more information.
    If a file extension is present, trailing periods and whitespace are allowed before the extension.
    No non-printable ASCII characters
    Transferring Microsoft Lists is not supported.

 

File and Folder Name Restrictions

The following are restricted file/folder names. For more information on Office 365 restrictions, see Microsoft’s official documentation.

  • _vti_test
  • CON
  • PRN
  • AUX
  • NUL
  • COM0
  • COM1
  • COM2
  • COM3
  • COM4
  • COM5
  • COM6
  • COM7
  • COM8
  • COM9
  • LPT0
  • LPT1
  • LPT2
  • LPT3
  • LPT4
  • LPT5
  • LPT6
  • LPT7
  • LPT8
  • LPT9

 

Connection Pooling

Microsoft OneDrive for Business connections using OAuth 2 authentication may experience bandwidth throttling from Microsoft when using connection pooling.

Corrupt Files

If you see “Error=Value=CobaltAllZerosDetected” errors in the logs, the file that triggered the error will not be uploaded to SharePoint Online. Microsoft produces this error for files it considers to be corrupt.

Delta Job Runs

After the initial transfer of an item using a Microsoft SharePoint connection, DryvIQ will leverage Microsoft’s change tracking API on delta job runs to identify changes. This results in fewer Graph API requests and shorter job execution times.

HTML Files

SharePoint Online does not support uploading HTML files larger than 256 MB. If your migration includes HTML files that exceed this limit, the file transfer will fail. DryvIQ will add an entry to the audit with the following message: "Unable to interpret the contents of this page because it exceeds the maximum page size of 268435456 bytes.”

Impersonation With Batch Mode

When using Impersonation with Batch Mode, SharePoint Online shows “System Account” in the activity rather than the impersonated user. This is expected behavior for batch mode/bulk migration API. With batch mode off, the impersonated user will display in the activity panel.

Invalid Characters and Spaces

DryvIQ verifies file and folder names to identify unsupported characters based on the platform. DryvIQ handles invalid characters according to the Allow unsupported file names to be changed setting for the job.

If the setting is disabled, DryvIQ will throw an exception when it encounters a file or folder that it cannot migrate due to an unsupported character in the name.

If enabled, DyvIQ will replace invalid characters with an underscore (_) or UTF-8 encoding based on the option selected, allowing DryvIQ to transfer the files and folders. The logic includes leading and trailing spaces in file and folder names. DryvIQ replaces the space rather than trimming it because trimming the space could cause duplicate file names. Adding the underscore ensures the name remains unique.

DryvIQ will sanitize file names that contain combined Unicode characters by replacing the characters with an underscore (_).

Language Translation

DryvIQ does not support translation when migrating between SharePoint sites that have different default language configurations.

DryvIQ currently supports file-based links only for OneDrive and SharePoint. This means DryvIQ will remediate links pointing directly to documents (Word documents, Excel workbooks, PowerPoint presentations, etc.). However, DryvIQ does not remediate links to folders or entire SharePoint sites. If your documents contain folder paths or site URLs, you’ll need to update those links manually after the migration to ensure they point to the correct location.

Microsoft Link Type Microsoft Link Format
Links to personal or user-owned files stored in the OneDrive document library <https://<tenant>>-my.sharepoint.com/:w:/r/personal/<UserOneDrive>/_layouts/15/Doc.aspx?sourcedoc={<PlatformId>}&file=<Filename>&action=default&mobileredirect=true
Links to team-based or site-owned files stored in libraries managed by SharePoint sites
  • <https://<tenant>>.sharepoint.com/<LibraryOrFolderPath>/<Filename>
  • <https://<tenant>>.sharepoint.com/<LibraryOrFolderPath>/<FileId>
  • <https://<tenant>>.sharepoint.com/_layouts/15/Doc.aspx?sourcedoc={<PlatformId>}&action=<Action>
  • <https://<tenant>>.sharepoint.com/:x:/r/_layouts/15/Doc.aspx?sourcedoc={<PlatformId>}&file=<Filename>&action=<Action>&mobileredirect=true

Lock Events

Graph API does not support lock event detection without the use of a separate API call, which will slow down change detection. The workaround is to disable native event detection to transfer locks in each job run or to use a soft reset to transfer locks as needed. 

Mapping

When creating CSV mapping files for import, the usernames must be lowercase to adhere to the search requirements for the connector properly.

Metadata Mapping 

If a library requires specific metadata but the metadata is missing from a file being copied into the library, the file will be flagged and will not transfer on subsequent job runs. If you have files stuck in a flagged state due to missing metadata, you may need to transfer the files and add the required metadata manually.  

OneNote Files

Microsoft has specific standards regarding migrating OneNote files (defined in the Microsoft documentation), and DryvIQ adheres to these standards. DryvIQ converts the OneNote files during the initial folder transfer. If a folder is a valid OneNote folder, DryvIQ will convert it to a OneNote file on Microsoft 365. The item status in the DryvIQ Platform will be “Revised” to indicate DryvIQ converted it. If it is not a valid OneNote folder, DryvIQ will not convert the folder and will transfer it as a regular folder to Microsoft 365.

Updates to the files will not result in the folder type changing, so DryvIQ will not update the folder type based on events in the folder after initial transfer. For example, if a folder contains a non-OneNote file, DryvIQ transfers it as a regular folder on the initial transfer. If you remove the non-OneNote files from the source folder, DryvIQ will not detect the change and will not attempt to convert the folder on subsequent job runs.

Timestamps

There is a discrepancy in timestamps for the SharePoint Online Folder Created Date when using CSOM and Batch ModeThis behavior is a known issue within OneDrive for Business/Office 365.

DryvIQ will attempt to preserve timestamps on folders when using both CSOM and the batch API. However, SharePoint Online updates the folder's modified dates whenever a file is uploaded into it. As a result, when using CSOM, the timestamps are preserved when the folder is created, but they are updated after every file that gets uploaded. When using the batch API, it preserves the timestamps on the folders after all of the files within the batch are committed. This process is the cause of the discrepancy between the two methods.

Version Deletes

Version deletes are supported. 

Platform Item Exception Errors

DryvIQ uses a batch job (uploading multiple files and committing them to the destination asynchronously) to migrate files that do not exist to Microsoft Office 365 or OneDrive for Business connections since this is the best practice for storage providers that offer batch support. If Microsoft responds with “item already exists” during a batch migration job, DryvIQ compares the latest set of item properties (modified, versions, and number of bytes) to the item properties in the batch job. If the properties on the existing destination file do not match the properties in the batch job, DryvIQ will generate an error identifying the conflicting properties, as in the example below.

PlatformItemOutOfDateException: The item changed during processing. Retry the item to resolve the issue. Contact support if the problem persists. /TD_7bcd1ca33f274b0bb7a8698f99936f6b/Folder/File.txt with changed properties: timestamp - original:7/3/2024 4:09:49 PM +00:00, latest:7/3/2024 4:09:56 PM +00:00; number of bytes - original:3, latest:8;

In the error, “original” refers to the item property in the batch job, and “latest” refers to the item property on the destination. The item will be flagged for retry and will be handled like a regular retry item. After selecting the retry action (Retry, Ignore, etc.), the item should be resolved. 

If the batch job and destination have the same properties, no error will be generated, and the item will be transferred.