CLNG FAQ

Where is my Cycom Azure account tenant located (and is Azure for Government supported)?
The Cycom Azure Subscription is located in the geographic region nearest to you. Azure for Government is not currently supported, but we're investigating whether its feature list can support NG.

What data is stored in the Cycom Azure account vs our Microsoft 365 tenant?

The CityLaw/County Azure SQL Database is stored in the Azure Subscription. All document attachments are stored in your Microsoft 365 Tenant.

Is SSO via Microsoft Entra SSO supported?

SSO is not currently supported. Every user must have a CLNG User Account (Auth0).

What account access logging or IP location restrictions can be enforced on the Cycom Azure account?

By default, no IP address can access the Azure database without being manually added to the firewall.  No IP will need to be added for NG access.  Graph API logging is controlled by your Entra ID tenant.

What is the data retention policy and legal retention requirements on the data you host for our client? Can we request data removal and or retention if specific litigation requires it?

Your IT department can enforce data retention policies on your SharePoint Site in your Microsoft 365 Tenant according to your requirements.

Why is full read and write access to the Microsoft 365 tenant mailboxes required?

Currently, Microsoft only offers searching a User's Mailbox under Application Permissions with the Mail.ReadWrite privilege. CLNG restricts searching to only those mailboxes to which the User has access under their M365 Account Email.

Why is read and write access to SharePoint Sites required?

Currently, Microsoft only allows read/write permissions and Share Link permissions on a SharePoint Site's Document Library under Application Permissions with the Sites.ReadWrite.All privilege, however, CLNG only accesses the Document Library of the SharePoint Site matching the Drive ID provided by your IT department. These permissions are required in order for Users to save files to your SharePoint File Share as well as open and edit those files.

The App Registration documentation describes the ability to "Unconsent" to Modify permissions in Graph Explorer. What does this affect and when is it recommended?

The "Unconsent" step only affects whether you (as an Administrator of your Microsoft 365 Tenant) can perform the given action in the Microsoft Graph API Explorer website. It has no effect on CLNG.