CDM and Microsoft 365

Microsoft Entra ID permissions used by CDM are 'delegated'. This means that IAM Cloud or our cloud platform can't access your Microsoft 365 tenancy data. CDM is a desktop client, which, with its delegated permissions, can act on behalf of the signed-in user and only do what the signed-in user can do manually. CDM does not grant the user any enhanced privileges, and it cannot act outside of the control or active session of the signed-in user.

CDM provides you with a connection between your Windows desktop/Virtual Desktop Infrastructure (VDI) session and Microsoft 365 account (including OneDrive and SharePoint team sites that you have permission to access) secured by your Microsoft Authentication Library (MSAL) authenticated session. Essentially, CDM is a secure web browser for files. No data can leave the session between your computer and Microsoft 365 account.