Viva Engage

Overview

LightBeam Spectra users can connect various data sources to the LightBeam application and these data sources will be continuously monitored for PII, PHI data.

Example: Viva Engage (formerly Yammer), SharePoint, OneDrive, etc.

About Viva Engage

Viva Engage (formerly Yammer) is structured hierarchically to organize conversations and collaboration across an organization:

• Networks: Your organization's workspace tied to your Microsoft 365 tenant

• Communities (Groups): Topic-based collaboration spaces where discussions, posts, and files are organized

• Conversations (Threads): Collections of messages about specific topics

• Messages (Posts): Individual posts within a conversation, including original posts and replies

Connecting Viva Engage Data Source

1. Log in to your LightBeam Instance.

2. Click on DATASOURCES on the Top Navigation Bar.

3. Click on Add a Data Source.

1. Search for “Viva Engage”.

   
2. Click on Viva Engage.

   
3. Fill in the details as shown below and click on Next:

Basic Information

• Data Source Name: This is the unique name given to the data source.

• Description: This is an optional field needed to describe the use of this data source.

• Primary Owner: Email address of the person responsible for this data source. In case of alerts, this email ID will get alerts by default.

• Entity Creation: LightBeam Spectra detects and associates attributes based on the context and identifies whose data it is; these are called entities.

  Example: Jane Doe is an entity for whom LightBeam Spectra might have detected Name and SSN in a monitored data source.

• Source of Truth: LightBeam Spectra would have monitored data sources that contain data acting as a single point of truth and that can be used for looking up entities/attributes which help to identify if the other attributes entities found in any other data source are accurate or not.

  A Source of Truth data set would create entities based on the attributes found in the data.

• Location: The location of the data source.

• Purpose: The purpose of the data being collected/processed.

• Stage: The stage of the data source.

  Example: Source, Processing, Archival, etc.

  

Datasource Configuration

1. Follow the steps below to set up your data source. Credentials:

   • Client ID: Input the unique identifier designated to your application (App ID).

   • Client Secret: Enter the confidential passphrase or token associated with your client ID.

   • Tenant ID: Provide the Directory (tenant) ID that identifies your Microsoft 365 tenant.

   • Authorization Code: This code is auto populated when the Click here to Authorize Access button is clicked.

   
2. Verify Connection:

   • Once the above details are filled out, click on Test Connection to ensure that the configuration is correct and the system can connect using the provided details.

     
3. Scan Settings

   In this step, you can choose:

   • Scan All Communities: Select this option to scan all communities in Viva Engage.

   • Scan My Communities: Select this option to scan only communities that you are a member of.

   • Scan Selected Communities: Select this option to specify particular communities to scan.

   If you choose Scan Selected Communities, you'll be able to search for and select specific communities to include in your scan. Each community you select will appear in the list below with checkboxes.

1. Click on Save.

Now you are ready to browse through the onboarded Viva Engage datasource dashboard. The dashboard will show all the communities being scanned, and you can click on any community to see the conversations and messages that have been scanned.

Appendix

Steps to Generate Viva Engage Data Source Credentials

1. Log in to the Microsoft Entra Admin Center with your Azure or Microsoft 365 account.

2. Navigate to "App registrations" > "New registration" Figure 7. LightBeam Viva Engage - Microsoft Entra Admin Center

   
3. Enter an App name (e.g., "viva-engage-client") and select "Accounts in this organizational directory only (Single tenant)" for Supported account types.

4. Click on Register.

   

5. After registration, note down the Application (client) ID and Directory (tenant) ID shown on the Overview page.

   
6. Generate a Client Secret:

   • Click on "Certificates & secrets" in the left sidebar

   • Click on "New client secret"

   • Provide a description and set expiration (e.g., 6 months, 1 year)

   • Click "Add" and immediately copy the secret value (you won't be able to see it again)

7. Configure API Permissions:

   • Click on "API permissions" in the left sidebar

   • Click on "Add a permission"

   • Select Yammer

   • Choose "Delegated permissions"

   • Add the following required permissions:

     Copy

     User.Read
     Community.Read.All       
     EngagementConversation.Read.All  

1. Click on "Grant admin consent" if needed

1. Set redirect URL for OAuth2 flow:

• Click on "Authentication" in the left sidebar

• Click "Add a platform" > "Web"

• Set the redirect URL to: https://{LIGHTBEAM_BASE_URL}/viva-engage-callback (or another URL if specified by your LightBeam team)

• Save the configuration

With these steps completed, you will have all the required configuration parameters (Client ID, Client Secret, Tenant ID) to onboard the Viva Engage datasource to LightBeam

About LightBeam

LightBeam automates Privacy, Security, and AI Governance, so businesses can accelerate their growth in new markets. Leveraging generative AI, LightBeam has rapidly gained customers’ trust by pioneering a unique privacy-centric and automation-first approach to security. Unlike siloed solutions, LightBeam ties together sensitive data cataloging, control, and compliance across structured and unstructured data applications providing 360-visibility, redaction, self-service DSRs, and automated ROPA reporting ensuring ultimate protection against ransomware and accidental exposures while meeting data privacy obligations efficiently. LightBeam is on a mission to create a secure privacy-first world helping customers automate compliance against a patchwork of existing and emerging regulations.

For any questions or suggestions, please get in touch with us at: [email protected].