Skip to main content
Documentation
Documentation
Administrator Guide
Last Updated: 2026-11-06
Connect a Microsoft OneDrive Account to Self-Service Agent

Connect a Microsoft OneDrive Account to Self-Service Agent

  • Identify your Microsoft Global Administrators. The OneDrive integration uses application permissions that require admin consent in Microsoft Entra. Only Global Administrators can grant admin consent for your organization.
  • Ensure a Microsoft Global Administrator is available when you are configuring the connector for the first time so that they can grant admin consent during the course of the set up.
  • Set up and enable Agent System of Record and Self-Service Agent:
You can enable the Self-Service Agent to use documents in your Microsoft OneDrive account to answer your employee's policy-related questions. Adding OneDrive as a document connector increases the relevancy of Self-Service Agent responses without the need to manually upload your existing documents to Workday.
When you don't have the Help SKU, ensure you connect to OneDrive before enabling the Policy Intelligence skill on the Self-Service Agent so that you don't encounter an error.
  1. When you connect to OneDrive from Workday, use a OneDrive account that is designated as a service account rather than an individual user’s account. This ensures that employee turnover doesn’t disrupt agent access or the employee experience.
  2. Grant Admin Consent in Microsoft Entra.
    1. Open a new browser window and access the OneDrive permissions page.
    2. On the dialog window listing out the permissions, click
      Accept
      .
  3. Verify that the app permissions were installed.
    1. Open Microsoft Entra and access
      Enterprise Apps
      Workday OneDrive
      . Click the account name to open the application Overview page.
    2. Click
      Permissions
      .
    3. On the
      Admin Consent
       tab, confirm that these permissions are listed:
      API Name
      Claim Value
      Microsoft Graph
      GroupMember.Read.All
      Microsoft Graph
      Sites.Read.All
      Microsoft Graph
      User.ReadBasic.All
      Microsoft Graph
      Files.Read.All
  4. Enable the
    Agent Documents
     domain in the Agent System of Record functional area.
  5. Initiate OneDrive connection from Workday.
    1. Login to Workday as a security administrator.
    2. Access
      Agent Management Hub
      Agent Registry
      Self-Service Agent
      .
    3. On the
      Documents
      tab, click
      Manage Connectors
      .
    4. On the Microsoft dialogue, login with the OneDrive service account that you intend to use for ingesting the policy documents.
  6. Select OneDrive document folders in Workday.
    1. Access
      Agent Management Hub
      Agent Registry
      Self-Service Agent
      .
    2. On the
      Documents
      tab, click
      Add Documents
      .
    3. On the Microsoft dialog, login with the OneDrive service account that you intend to use for ingesting the policy documents.
    4. Select the folders to ingest. You can’t select individual documents.
      Workday is optimized to ingest up to 400 MB of content within a 24-hour window. Workday won’t process beyond 200 MB and doesn't not indicate which files it didn't not process. The ingestion can take up to 24 hours to process the files and the associated permissions. Check back later to confirm that there were no errors during the ingestion process. The files will display a
      Synced
       status once completed.
  7. Enable the
    Policy Intelligence
     skill and configure the
    search_policy_documents
     tool.
    When you don’t have the Help SKU, ensure you connect to OneDrive before enabling the Policy Intelligence skill on the Self-Service Agent so that you don’t encounter an error.
    You no longer need the Help SKU to enable the
    Policy Intelligence
     skill. If you have the Help SKU, the Self-Service Agent will also provide responses from your Workday Help articles.
The Self-Service Agent can now access your OneDrive document folders and use them to answer questions. Self-Service Agent enforces the OneDrive file security when providing answers.
Test the Self-Service Agent to verify the accuracy of its responses related to the information in your OneDrive policy documents. Example: Ask about a few documents from each document folder, including a restricted document. Ask once as a worker who can read the document in OneDrive and once as a worker who can’t.