Jerry Lau

Access controlled link: The file (behind the scenes) is copied to the Service Account OneDrive, and linked to the Assignment as a submission. This means the student cannot modify it, but the Teacher can read it.

Does the MS OneDrive service account need to be a member of a particular system role? I don't think so. I think it is just allowing " external sharing" that is the issue, correct?

It looks like the more secure institutions are not allowing this method (access control link) as this is a security risk. Anyone has it working with their Azure/MS platforms? So far no one I talked to have either 1. not integrated onedrive and 2. have not looked into this... most are using D2L or some other LMS

is there a more detailed log about this error somewhere to see where it has failed precisely?

Exception - notAllowed: The operation failed because sharing has been disabled on this site.
File: /lib/classes/oauth2/rest.php
Line: 123

so i would have to enable "Anyone" sharing to a file FIRST before adding it to a file repository right? Then I can use the access controlled link I suspect?

Even if we allow "anyone" technically the public does not have access and still have to authenticate through our institutions authentication platfom, correct? Basically, this does not mean that anyone with that link can get to it because the link created for that file is still behind our Moodle server, correct?

thanks

Is this not a massive security risk if we allow anyone to just share? does this setting need to be adjusted?