Adding New Document Accounts

• 1: Add AWS S3 Account
• 2: Add Google Cloud Storage Account
• 3: Add Wasabi Hot Storage Account
• 4: Add OneDrive Account

1 - Add AWS S3 Account

AWS S3 Setup

These steps need to be completed within the AWS console

1. Sign into or create an Amazon Web Services (AWS) account
2. Go to All services > Storage > S3 in the console
3. Create a default or test bucket
4. Go to All Services > Security Identity & Compliance > IAM > Users in the console
5. Select the Create User button
6. When prompted, enter a username and select Access Key - Programmatic access only. Select the Next: Permissions button.
7. Select the option box called Attach existing policies directly
8. In the filter search box type s3. When the list filters down to S3 related items select AmazonS3FullAccess by checking the box to the left. Select the Next: Tags button.
9. Skip this step by selecting the Next: Review button
10. Select the plus icon next to the WasabiFullAccess policy to attach the policy to the user. Select the Next button.
11. Review the User settings and select Create user
12. Capture the keys generated for the user by downloading the CSV or copy/pasting the keys somewhere for use later. You will not be able to retrieve this key again so keep track of it. If you need to regenerate a key simply go back to step 5 above.

You should now have everything you need to add your S3 account to PlaidCloud Document.

PlaidCloud Document Setup

1. Sign into PlaidCloud
2. Select the workspace that the new Document account will reside
3. Go to Document > Manage Accounts
4. Select the + New Account button
5. Select Amazon S3 as the Service Type
6. Fill in a name and description
7. Leave the Start Path blank or add a start path based on an existing Wasabi account hierarchy. See the use of Start Paths for more information.
8. Select an appropriate Security Model for your use case. Leave it Private if unsure.
9. Paste the Access Key created in step 12 above into Public Key/User text field under Auth Credentials
10. Paste the Secret Key created in step 12 above into the Private Key/Password text field under Auth Credentials
11. Select the Save button and your new Document account is live

2 - Add Google Cloud Storage Account

Google Cloud Setup

These steps need to be completed within Google Cloud Platform

1. Sign into or create a Google Cloud Platform account
2. Select or create a project where the Google Cloud Storage account will reside
3. Go to Cloud Storage > Browser in the Google Cloud Platform console
4. Create a default or test bucket
5. Go To IAM & Admin > Service Accounts in the Google Cloud Platform console
6. Select the + Create Service Account button
7. Complete the service account information and create the account
8. Find the service account just created in the list of service accounts and select Manage Keys from the context menu on the right
9. Under the Add Key menu, select Create a Key
10. When prompted, select JSON format for the key. This will generate the key and automatically download it to your desktop. You will not be able to retrieve this key again so keep track of it. If you need to regenerate a key simply go back to step 8 above.
11. Go to IAM & Admin > IAM in the Google Cloud Platform console
12. Find the service account you just created and click on the edit permissions icon
13. Add Storage Admin and Storage Transfer Admin rights for the service account and save. Note less permissive rights can be assigned but this will impact the functionality available through Document.

You should now have everything you need to add your GCS account to PlaidCloud Document.

PlaidCloud Document Setup

1. Sign into PlaidCloud
2. Select the workspace that the new Document account will reside
3. Go to Document > Manage Accounts
4. Select the + New Account button
5. Select Google Cloud Storage as the Service Type
6. Fill in a name and description
7. Leave the Start Path blank or add a start path based on an existing GCS account hierarchy. See the use of Start Paths for more information.
8. Select an appropriate Security Model for your use case. Leave it Private if unsure.
9. Open the Service Account JSON key file you downloaded in step 10 above and copy the contents
10. Paste the contents into the Auth Credentials text area
11. Select the Save button and your new Document account is live

3 - Add Wasabi Hot Storage Account

Wasabi Hot Storage Setup

These steps need to be completed within the Wasabi Hot Storage console

1. Sign into or create a Wasabi Hot Storage account
2. Go to Buckets in the console
3. Create a default or test bucket
4. Go to Users in the console
5. Select the Create User button
6. When prompted, enter a username and select Programmatic (create API key) user
7. Skip the group assignment. Select the Next button
8. Select the plus icon next to the WasabiFullAccess policy to attach the policy to the user. Select the Next button.
9. Review the User settings and select Create User
10. Capture the keys generated for the user by downloading the CSV or copy/pasting the keys somewhere for use later. You will not be able to retrieve this key again so keep track of it. If you need to regenerate a key simply go back to step 5 above.

You should now have everything you need to add your Wasabi account to PlaidCloud Document.

PlaidCloud Document Setup

1. Sign into PlaidCloud
2. Select the workspace that the new Document account will reside
3. Go to Document > Manage Accounts
4. Select the + New Account button
5. Select Wasabi Hot Storage as the Service Type
6. Fill in a name and description
7. Leave the Start Path blank or add a start path based on an existing Wasabi account hierarchy. See the use of Start Paths for more information.
8. Select an appropriate Security Model for your use case. Leave it Private if unsure.
9. Paste the Access Key created in step 10 above into Public Key/User text field under Auth Credentials
10. Paste the Secret Key created in step 10 above into the Private Key/Password text field under Auth Credentials
11. Select the Save button and your new Document account is live

4 - Add OneDrive Account

OneDrive Setup

These steps need to be completed within the Azure portal to register an application and obtain the credentials PlaidCloud needs to access OneDrive.

Register an Application in Azure

1. Sign in to the Azure portal and navigate to Microsoft Entra ID.
2. In the left sidebar, select App registrations.
3. Click + New registration.
4. Enter a name for the application (e.g., PlaidCloud).
5. Under Supported account types, select the option that matches your organization:
   • Accounts in this organizational directory only — for a single-tenant setup (most common)
   • Accounts in any organizational directory — for multi-tenant access
6. Leave the Redirect URI blank.
7. Click Register.

Copy the Client ID and Tenant ID

After registration, you will land on the application overview page.

1. Copy the Application (client) ID — this is your Client ID. Save it for the PlaidCloud Document setup below.
2. Copy the Directory (tenant) ID — this is your Tenant ID. Save it as well.

Both values are displayed on the application overview page immediately after registration.

Create a Client Secret

1. In the left sidebar, select Certificates & secrets under Manage.
2. Click + New client secret.
3. Enter a description (e.g., PlaidCloud) and choose an expiration period.
4. Click Add.
5. Copy the Value of the newly created secret immediately — this is your Client Secret. It will not be shown again after you leave this page.

Grant API Permissions

1. In the left sidebar, select API permissions under Manage.
2. Click + Add a permission.
3. Select Microsoft Graph.
4. Select Delegated permissions or Application permissions depending on your access model:
   • Use Application permissions for unattended/service access (most common for PlaidCloud Document)
5. Search for and select the following permissions:
   • Files.Read.All — to read files and folders
   • Files.ReadWrite.All — if PlaidCloud Document needs to write files
   • Sites.Read.All — if accessing SharePoint-backed OneDrive for Business libraries
6. Click Add permissions.
7. Click Grant admin consent for [your organization] and confirm.

Find the OneDrive Drive Path (Start Path)

The Start Path in PlaidCloud Document controls which folder in OneDrive is used as the root for the account. To find the correct path:

1. Open OneDrive or your organization's SharePoint-based OneDrive for Business in a browser.
2. Navigate to the folder you want to use as the root for this PlaidCloud Document account.
3. The path shown in the browser's address bar or the folder breadcrumb reflects the folder hierarchy within OneDrive.
4. Use the relative path from the root of the drive as the Start Path — for example, /Documents/Finance or /Shared/Data.

You should now have everything you need to add your OneDrive account to PlaidCloud Document.

PlaidCloud Document Setup

1. Sign into PlaidCloud
2. Select the workspace that the new Document account will reside
3. Go to Document > Manage Accounts
4. Select the + New Account button
5. Select OneDrive as the Service Type
6. Fill in a name and description
7. Enter the folder path identified above into the Start Path field, or leave it blank to use the root of the drive
8. Select an appropriate Security Model for your use case. Leave it Private if unsure.
9. Paste the Client ID copied from the Azure app registration into the Public Key/User text field under Auth Credentials
10. Paste the Client Secret copied from the Azure app registration into the Private Key/Password text field under Auth Credentials
11. Paste the Tenant ID copied from the Azure app registration into the Tenant ID field under Auth Credentials
12. Select the Save button and your new Document account is live