Delete or Downgrade the Global Administrator Account
Netskope requires a global administrator account to grant rights to the Netskope Activity Feeds for Microsoft Office 365 SharePoint Sites application. Post-grant, you can delete or downgrade the original service account that you have used to set up the Microsoft Office 365 SharePoint Sites app instance. To do so, follow the steps below:
Log in to the Netskope tenant and navigate to Settings > API-enabled Protection > SaaS and click the Microsoft Office SharePoint Sites app.
The UI displays a list of app instances.
Click the relevant app instance and note down the admin email address.
Log in to the Microsoft Office 365 admin center at login.microsoftonline.com.
Note
Do not log in with the global administrator email account that you have used to set up the Microsoft Office 365 SharePoint Sites app instance. You should log in using an alternate administrator account. Ensure that the logged in user has enough permissions to delete or downgrade a global administrator role. For example, you can log in as a user administrator account.
Navigate to Admin > Users > Active users. Search for the user you noted in step 2 and select the user.
Under the Accounts tab, you can either delete the user or downgrade the role:
To delete the user, click Delete user.
Note
If you intend to re-grant the Microsoft Office 365 SharePoint Sites app instance anytime in future, create a temporary user with a global administrator role and use this account to re-grant.
To downgrade the role, under Roles, click Manage roles. Select a non-global administrator role and click Save changes.
Note
If you intend to re-grant the Microsoft Office 365 SharePoint Sites app instance anytime in future, reassign the global administrator role to the user before re-granting.
Important
If you intend to integrate Microsoft Information Protection (MIP) with Netskope, you should downgrade the admin role to Azure Information Protection Administrator and Application Administrator at a minimum.