Microsoft OneDrive grants overly broad permissions to third-party apps, which allows them to access all content in a user's account. Obsidian Security identifies which applications have overly permissive scopes to mitigate risks and manage third-party app permissions.

Although Microsoft 365 apps share a common login, differences in application usage, access, and settings complicate their security.

