Any Microsoft Global admin service account can be used to authenticate a connector in Keepit. However, we recommend you create a dedicated account for backup, in particular, because this account will automatically become a member of Groups and Teams.

When using Keepit, we also recommend you do so in a separate incognito browser. This will prevent Keepit from authenticating the wrong Microsoft account. Keepit will use the account you are logged in with in the browser, and this may not be the account you want to use for backup.

Re-authenticate your connector

If you do accidentally authorize a different account, you can easily re-authenticate with the proper service account.

To re-authenticate your connector:

1. On the Connectors page, select the gear icon to the far right of your connector's name, then select Configure connector.
2. At the bottom of the configuration window, select the re-authenticate key icon.

3. This will take you to Microsoft where you can log in with the correct service account.
4. You will be taken back to Keepit, and the next backup will be performed using the correct account.

Remove service account from Groups and Teams

A service account that authenticates a connector automatically becomes a member of all Teams and Groups that are backed up. If you authenticated with the wrong account, you may want to remove this account from Groups and Teams. 

To remove a service account:

1. Sign in to your Microsoft Global admin account.
2. Open the Admin app.

3. In the left navigation pane, select Users > Active users

4. Select the circle to the right of the the user you want to remove, then select Assign to group

5. In the next window, click the X to the right of the Group(s) you want to remove the user from, and then select Save

This will remove the user from all selected Groups and will automatically delete the user from the Teams associated with the Groups.