Allowing cloud uploads from Microsoft OneDrive and Google Drive

Both Microsoft and Google require one approval from a school administrator before students can hand up coursework or add portfolio files from their own cloud storage. Students cannot grant it themselves.

Students can always choose a file from the computer. Approving this adds a second route; refusing it takes nothing away.

Microsoft 365 / OneDrive

What you are granting

Files.Read.All — the files the student can already see. Used once per upload, for the one file they pick.
User.Read — their own name, so the picker can show whose account it is.
offline_access — lets the connection refresh rather than interrupting a student mid-upload.
All three are delegated: they act only as the signed-in student, only while they are signed in. No access to staff files, and none at all when nobody is signed in. No password reaches CourseworkHQ — sign-in happens on Microsoft's own page.

Open this link in a browser: https://login.microsoftonline.com/organizations/adminconsent?client_id=6f72c183-b2b6-42a1-ade5-dacd78dd4c5b
Microsoft asks you to sign in. Use an account that can approve apps for your school — Privileged Role Administrator, Application Administrator or Cloud Application Administrator. If you are already signed in as somebody else, open the link in a private window.
Microsoft then lists the permissions below. Choose Accept.

Or from the Microsoft Entra admin center: Entra ID → Enterprise apps → All applications, search for CourseworkHQ, then Permissions → Grant admin consent.

Afterwards the app is listed under Enterprise applications, where you can see what was granted and revoke it at any time.

Google Workspace for Education / Google Drive

What you are granting

One scope: https://www.googleapis.com/auth/drive.file — Google describes it as the files the student uses with this app, and nothing else in their Drive. We cannot list or browse what they have not picked.
No password reaches CourseworkHQ. Google Docs are converted to Word format on the way through, so a student need not export one first.

Sign in to the Google Admin console at admin.google.com, with an account that can manage app access — a super administrator, or one with the Service Settings privilege.
Go to Security → Access and data control → API controls.
Click Manage App Access, then Configure new app.
Search for this OAuth client ID: 526882158898-bmavhj0k09vu68vjkenmubt15l0up5k9.apps.googleusercontent.com
Select CourseworkHQ, choose who it applies to, and click Continue.
For Access to Google data, choose Specific Google data and enter the drive.file scope above together with the Google Sign-in scopes. Limited also works and is quicker. Trusted grants more than this app needs.
Continue, review, Finish.

Afterwards the app is listed under Configured apps, where you can change or block it at any time.

Questions

Email admin@courseworkhq.ie. Our privacy policy sets out what is stored and for how long, and the sub-processor register lists every company that processes data on our behalf.