OneDrive tools — CloudSergeant

Choosing a OneDrive

Each wizard starts by choosing how the drive will be opened:

My OneDrive: The OneDrive belonging to the primary signed-in user.
Internal OneDrive: Search the active tenant's OneDrive usage list. CloudSergeant probes the real folder tree immediately. In your home tenant, a SharePoint Administrator can add themselves as a site collection administrator if access is missing; the wizard waits and probes again until the grant is usable.
External OneDrive: Sign in separately as an account that can already open the drive. This identity can belong to another tenant, and the source and destination in Copy / Move can use different identities.

The second sign-in is temporary

Its tokens are kept only for the current session and are never added to CloudSergeant's persistent token cache. A running job holds a temporary lease on them, so starting over or signing out of the wizard does not cut off a transfer already in progress.

Copy / Move

Source → Destination → Options → Selection → Summary.

Choose source folders, a destination OneDrive, and the root or subfolder where they should land. CloudSergeant always recreates the complete source hierarchy below that folder, including selected folders that contain no files. A completely empty selected subtree is a valid copy or move. You can also create and select a new destination folder without leaving the wizard.

A cross-drive or cross-tenant copy is a download followed by an upload; files pass through the desktop and never through the CloudSergeant service. An existing destination file with the same name and size is skipped. Move uses the same copy path and deletes each source only after its upload has succeeded, placing that source in its OneDrive recycle bin. It then removes empty source folders from the selected tree and continues through empty parents. Every folder is checked first: if a file remains because its upload or deletion failed, that file's complete folder chain stays intact.

Export / Import

Direction → Source → Destination → Options → Selection → Summary.

Export writes the selected files into a standard .zip, preserving their OneDrive folder paths. The default archive name contains the drive owner and export time. Import first inventories a local ZIP so its folders can be selected, then uploads those entries into the chosen OneDrive folder.

Import always recreates the archive's folder structure below the chosen OneDrive root or subfolder. You can create and select a new landing folder in the wizard. Skip files already in the target is on by default and compares name plus size; it avoids a duplicate without claiming the contents are byte-for-byte identical.

A OneDrive ZIP is a file archive, not a Microsoft 365 backup format

It preserves files and folders. It does not capture sharing links, version history, permissions, retention labels, recycle-bin entries or other SharePoint metadata.

Cleanup

Source → Action → Selection → Summary. Cleanup has two distinct paths:

Action	Selection and result	Where available
Delete selected files	Choose folders, then filter by age, minimum size and extension. Review every match before moving it to the recycle bin or permanently deleting it.	Any drive the chosen identity can open
Empty recycle bin	Reads the current size, then permanently removes both recycle-bin stages after a separate confirmation.	Home tenant, primary sign-in only

Filter values of zero or blank mean “any”. Permanent delete is never the default, is named explicitly in the summary and confirmation, and does not put the file into the recycle bin. After filtered cleanup, empty folders in the selected tree and their empty parents are moved to the recycle bin—even when the matching files were permanently deleted—so folder cleanup can use a conditional safety check. A folder containing any remaining item is kept, so a failed file deletion preserves its full parent chain. Emptying the recycle bin is permanent and removes both stages.

You are responsible for this run

These tools act only because you chose to run them, using your own signed-in permissions. Permanent delete and emptying the recycle bin above cannot be undone by CloudSergeant or by IT Ribe once run — see Terms — Limitation of liability.

Runs and failures

Execute snapshots the choices and opens a separate job window. Up to eight files are processed in parallel, progress and succeeded/skipped/failed counts remain attached to that run, and the main workspace is free for another task. Technical details go to the local activity log; the interface shows an actionable summary rather than Graph or SharePoint response bodies.

Customer tenants and GDAP

GDAP can reach the customer's SharePoint tenant-admin settings but Microsoft refuses that partner identity at the OneDrive file plane. The tools therefore do not run with the GDAP token. Choose the separate sign-in and use a customer-tenant account that can already open the drive; no GDAP role or application permission is added by doing so.

Recycle-bin emptying is the exception to that workaround. It calls the personal OneDrive site's SharePoint endpoint, which is available only in the home tenant with the primary sign-in, so the option is absent in a customer tenant and explains why.

Permissions

Files.ReadWrite.All is the existing baseline delegated Graph permission for file enumeration, download, upload and deletion.
SharePoint AllSites.FullControl plus SharePoint Administrator is needed to grant site collection administrator access and to read or empty a recycle bin.
No new permission was added for the OneDrive tools.