OneDrive User Connector

Connect your own OneDrive to Abacus.AI so that ChatLLM Teams chats with RouteLLM, the Abacus AI Agent and Custom Chatbots can search and read your files under your own identity. The connector only sees files that your account can access.

An Entra admin must set this connector up first

Microsoft blocks ordinary users from consenting to the Abacus.AI app on their own. Before anyone else in your tenant can connect OneDrive, a Microsoft Entra admin must create the connector once and tick the "Consent on behalf of your organization" checkbox on Microsoft's Permissions requested screen, then click Accept.

This is not the same as the Grant admin consent button in the Entra admin center. Once the admin has ticked the checkbox, every user in that tenant can sign in and create their own connector freely. Until then Microsoft stops them with "Need admin approval".

See Microsoft Entra Tenant Consent for the full walkthrough.

Prerequisites

• Access to ChatLLM Teams
• A Microsoft 365 account with OneDrive
• To use your own Entra app: administrative access in Abacus.AI to create connectors

Scopes and permissions

The OneDrive connector requests the following Microsoft Graph permissions. All of them are delegated permissions, consented to by each signed-in user, so the connector can never read more than the user could.

Permission	Purpose
Files.Read, Files.Read.All	Read the user's files and all files the user can access
Files.ReadWrite.All	Full access to all files the user can access
SensitivityLabel.Read	Read the user's sensitivity labels, so labelled files can be excluded
User.Read	Sign in and read the user's profile
openid, profile, offline_access	Sign the user in and maintain access without re-prompting

The scopes are fixed. The only platform-side option is to use your organization's own Entra app instead of the Abacus.AI one.

Use your own Entra app (Custom OAuth)

1. Register an app in Microsoft Entra following the Microsoft documentation. Add the redirect URI https://abacus.ai/oauth/callback and grant it the delegated permissions listed above.
2. In the Abacus.AI interface, click your profile picture in the top right corner and select Manage Connectors (or open the Connected Services Dashboard).
3. Click Add New Connector and choose Onedrive from the list.
4. Turn the Config Only toggle on.

caution

Always enable the Config Only toggle here. Without it, the form creates an organization-level OneDrive connection to your own drive, and other users would gain access to it.

5. Enter your app's Client ID, Client Secret and Tenant ID in the CLIENT ID, CLIENT SECRET and TENANT ID fields.
6. Click Create. The configuration does not require a OneDrive sign-in. If you are prompted to connect to OneDrive, the Config Only toggle is off; review the previous steps.

Your own app registration still needs admin consent for its delegated permissions, granted from App registrations → your app → API permissions → Grant admin consent.

Use OneDrive in ChatLLM

Step 1 — Connect OneDrive

In ChatLLM Teams, click the Connectors link on the home page, or click your profile in the top right and navigate to Profile → User Connectors.

1. Scroll the connector list and click OneDrive.
2. A browser pop-up opens asking you to sign in to OneDrive and authorize Abacus.AI.
3. Review the requested permissions and click Allow (or Authorize).
4. After authorization completes, OneDrive appears under your connected services and is ready to use.

info

User connectors are configured once per user and run under your own identity. After the connector is set up, every chatbot and the Abacus AI Agent in your workspace can query data from it.

Step 2 — Chat with RouteLLM

1. Open a new chat in ChatLLM Teams.
2. From the model selector, choose RouteLLM (route-llm). RouteLLM automatically routes each request to the most suitable underlying model, and is available for unlimited use to ChatLLM subscribers.

3. Ask a question that references OneDrive, for example "Find my OneDrive files updated this week". RouteLLM invokes the OneDrive tool, fetches the data under your identity, and responds in chat.

The first time you query a newly connected service in a chat, you may be prompted to authorize the connector. Complete the sign-in once and the request continues automatically; subsequent requests reuse the connection.

tip

You don't need to train a Custom Chatbot to use OneDrive with RouteLLM. Once the connector is configured in the User Connectors panel, it is immediately available across your workspace chats and to the Abacus AI Agent.

Optional: use OneDrive in a purpose-built Custom Chatbot

If you want a dedicated bot with its own instructions and a restricted set of tools, train a Custom Chatbot in the Developer Platform and, under Advanced Options → Tool Use, select One_Drive_tool. If you created a config connector for your own Entra app, also pick it under **Config Connectors**. End users of that chatbot are prompted to sign in to OneDrive once, and the bot then acts under each user's own identity. See the Custom Chatbots guide for the full training and deployment walkthrough.

Important notes

• Sensitivity labels: the connector supports Microsoft Purview sensitivity labels. If configured, files matching specified sensitivity labels can be excluded during data ingestion. The SensitivityLabel.Read delegated permission must be granted.

Troubleshooting

• "Need admin approval" when connecting: the tenant consent step has not been done yet. Ask a Microsoft Entra admin to follow Microsoft Entra Tenant Consent.
• Files are missing: the connector only sees files your own account can open. Check sharing in OneDrive itself.
• Prompted to connect OneDrive while creating the config connector: the Config Only toggle is off. Turn it on before clicking Create.