Microsoft OneDrive Document Editing
Learn how to securely manage and edit documents stored in OneDrive while working within the Gatekeeper platform.
Estimated Read Time: 10 Minutes
Sections in this article:
- Introduction
- Using OneDrive from the Vault
- Using OneDrive within a Workflow
- Configuration
- Synchronisation Options
- FAQs
Introduction
The Microsoft OneDrive integration allows users to seamlessly open, edit, and share documents from Gatekeeper directly into their OneDrive environment. Users can access their files in OneDrive, collaborate in real time with other users, and ensure smooth document management without leaving Gatekeeper. Any document added to Gatekeeper can be edited in OneDrive without manually having to re-upload it. A linked backup is also automatically created so you will never have to worry about losing your data.
Using OneDrive from the Vault
To edit documents directly from contract or vendor records:
- Navigate to the relevant contract or vendor record and click the Files tab.
- Expand the 3 dots next to a Word document, then expand OneDrive.

- Select the relevant option to view the document in your native browser, or within the desktop app.
- Once editing is complete, click Sync in the Gatekeeper add-in.

Using OneDrive within a Workflow
On a Workflow Card
Users with access to a workflow card in a phase where Submit Draft and OneDrive actions are enabled can use the Edit in OneDrive option.
OneDrive provides real-time editing and collaboration on documents, while Gatekeeper ensures a full audit trail throughout the contract process.

Via Email
For users who interact with eNegotiate without logging into Gatekeeper, they can be emailed a link to collaborate on the draft:

Within this email, recipients have the following options for engaging in the process:
- Open in Browser or Open in Desktop: used for opening the draft in OneDrive for reviewing and editing purposes
- Submit Draft: used to submit the draft to the next phase in the workflow
- Accept Draft: used to confirm that you accept the current version
- Reject Draft: used to reject the current version, which will notify the other party
Configuration
Enable the Microsoft OneDrive Connection
Note: If you require further assistance with enabling this feature, please reach out to our Global Support Team.
To enable the OneDrive connection, follow the steps below:
- From the navigation menu, expand Settings, then click Configuration.
- Click Document Management.
- Within the Microsoft OneDrive tile, click Connect.
- If you're already signed into another document editor, a confirmation message will appear before switching to OneDrive. Click OK to proceed.
- Sign in to your Microsoft account if you haven't already done so, this will grant access to your OneDrive.
- Select your root folder. This is where Gatekeeper will store document backups. It's best to name the folder clearly so others with OneDrive access can recognise it easily. This helps prevent access issues caused by unclear file links.
Note: The root folder must be an existing folder within your OneDrive directory. Do not select the top-level directory as the root folder.
An administrator must authorise and enable syncing by clicking Authorise, which grants Gatekeeper permission to access the OneDrive account.
If the user does not have the required permissions, a shareable link is provided that can be sent to a Microsoft administrator to complete the authorisation.
Verify the Authorisation in Microsoft Entra
To confirm the integration has been correctly authorised, a Microsoft Entra administrator can check the permissions granted to the Gatekeeper enterprise applications. To do this:
- From Entra ID, navigate to Enterprise applications.
- Search for and open Gatekeeper OneDrive Folder Selector. This application is used only during root folder setup, and can be deleted once the integration is configured and running.

- Search for and open Gatekeeper OneDrive Integration v2. This is the active application used by the integration. Select Permissions and confirm that all four permissions have been granted under the Admin consent tab.

Note: The Grant admin consent for Gatekeeper button in Entra is equivalent to clicking the authorisation link shown in Gatekeeper after configuring the root folder. Either method can be used to complete authorisation.
Enable Workflow OneDrive Editing
To allow internal and vendor users to access OneDrive from cards on an eNegotiate phase:
- Click to edit the workflow phase where users will edit drafts using OneDrive.
- From Actions, select the OneDrive checkbox under the Submit Contract Draft action.

Note: To use the Submit Contract Draft action, a contract draft must first be associated with the contract on the workflow. For more information, see π Configure eNegotiate.
Enable Workflow OneDrive Editing via Email
As vendors do not have access to contract workflows in Gatekeeper, enabling OneDrive editing via email provides them with a way to collaborate on drafts without needing direct platform access. To configure this:
- On the vendor eNegotiate phase, follow the same steps as above to enable the Submit Contract Draft action with OneDrive.
- From Form Access, ensure the authorisation type is set to Vendor eNegotiate and select the relevant card owner. When assigned, this user will receive the draft and be responsible for reviewing and editing it.
- From Notifications, enable the toggle for the card owner.

- Click the pencil icon to edit the email template and select eNegotiate as the Button Type.

Access to OneDrive Files
When a workflow card lands on a phase with OneDrive enabled, Gatekeeper automatically grants editor access to all phase owners, including any workflow groups or teams.
- Access is provisioned at the individual file level, meaning users can only access the specific file associated with their card, not the root folder or any other files within it.
- If a new phase owner is added while the card is already on that phase, they will also receive access automatically.
- Users retain access to the file in OneDrive after the card moves on from the workflow phase. If you need to remove access, this must be done manually from within OneDrive.
Administrators can also share access manually from within OneDrive if needed:
- Sharing at the file level is useful for one-off access requirements, but will not grant any access to information within Gatekeeper.
- Granting access to the root folder itself should be reserved for administrators and workflow managers who need visibility across all files; other users do not need it, as Gatekeeper provisions file-level access automatically.
Note: External vendors do not need to be granted access manually. Microsoft handles their authentication directly via a one-time passcode sent to their email address.
Synchronisation Options
The OneDrive integration allows the file to remain accessible in OneDrive even after it has been saved or closed. Users can return to the file directly from their OneDrive and continue editing, including using Word on desktop without an internet connection.
Manual Sync
You can manually trigger a sync from Gatekeeper add-in, without needing to navigate to the file directly in Gatekeeper. This applies to files stored in both the Vault and within workflows. When synced, a new version of the file is created in Gatekeeper.
However, for eNegotiate drafts within a workflow, clicking Submit Draft or Accept Draft (or from an email) will not create a sync action.
Note: Manual sync is optional for eNegotiate workflows, as AutoSync is enabled by default.

AutoSync
The AutoSync feature is built into workflows, eliminating the need for users to manually sync documents back into the platform during drafting. Gatekeeper automatically detects any changes made to the file in OneDrive.
When an action is performed using the file (such as sending it via email or publishing), Gatekeeper will automatically check for and sync the latest changes. If the file has been updated, a new version will be created in the fileβs version history before the action runs. If no changes are found, the sync is skipped and the action continues.
AutoSync only runs when the draft moves out of a OneDrive eNegotiate phase. This helps reduce the number of file versions stored in Gatekeeper.

FAQs
What's the recommended way to set up OneDrive access for my team?
- Restrict access to the root folder to administrators and workflow managers only, and set this up when you first configure the root folder.
- For all other users, rely on Gatekeeper's auto-provisioning, which grants file-level access automatically when a card lands on a phase.
- Users retain access to the file in OneDrive after a workflow phase is complete. If you need to remove access, this must be done manually from within OneDrive.
Does renaming a contract or vendor in Gatekeeper rename the corresponding folder in OneDrive?
No. The OneDrive folder retains the name the contract or vendor had when it was first created. Any new files added after the rename will be placed in a new folder using the updated name, so you may end up with two separate folders for the same record.
Can OneDrive be used alongside Google Docs or Office for the Web?
No. OneDrive is mutually exclusive with Google Docs and Office for the Web. Enabling OneDrive replaces the online editing option previously available for those integrations.
What happens if the root folder is reconfigured?
Reconfiguring the root folder severs the connection to any existing files, meaning auto-sync and manual sync will no longer work for those files. All OneDrive sub-actions in your workflow configuration will also be disabled and will need to be re-enabled manually. It's recommended not to reconfigure the root folder while any eNegotiation is in progress.
Is the Gatekeeper Add-In required to use OneDrive?
No. The Add-In is not required to open or edit documents in OneDrive. It is only needed if you want to manually sync a document back to Gatekeeper, or to view Gatekeeper record information from within Word.
How do external (vendor) users access a file if they don't have a Microsoft account?
External users authenticate via a one-time passcode sent to their email address directly by Microsoft. No Microsoft account is required.
If a workflow card is delegated to another user, do they get access to the OneDrive file?
No, access would need to be granted manually from within OneDrive.
A user is getting the following error: The required OneDrive folder permissions have not been granted to allow you to write this file. What does this mean?
This means the user hasn't been granted access to the file or root folder in OneDrive. If auto-provisioning is enabled, check that the user is correctly assigned as a phase owner on the relevant workflow card.
Sync is failing after we moved a file in OneDrive, why?
If the file was moved outside of the configured root folder hierarchy, Gatekeeper can no longer authorise sync operations for it. Move the file back within the root folder to restore sync functionality.
