> ## Documentation Index
> Fetch the complete documentation index at: https://conductorone-docs-mcp-bridge-private-server.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Set up a Spanning connector

> C1 provides identity governance for Kaseya Spanning Backup for Office 365. Integrate your Spanning tenant with C1 for unified visibility and governance over user access.

C1 provides identity governance for Kaseya Spanning Backup for Office 365.
Integrate your Spanning tenant with C1 for unified visibility and governance
over user access.

## Capabilities

| Resource | Sync                                                          | Provision |
| -------- | ------------------------------------------------------------- | --------- |
| Users    | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |
| Roles    | <Icon icon="square-check" iconType="solid" color="#c937ae" /> |           |

## Gather Spanning credentials

<Warning>
  The Spanning connector is read-only. You need administrator access to the
  Spanning Backup for Office 365 admin console to generate an API key.
</Warning>

<Steps>
  <Step>
    Sign in to the Spanning Backup for Office 365 admin console for your
    tenant's region.
  </Step>

  <Step>
    Open **Settings** > **API Token** and generate an API key. The API key is
    region-specific.
  </Step>

  <Step>
    Note the admin email address used to sign in — it is the Basic Auth
    username — and copy the generated API key, which is the Basic Auth
    password.
  </Step>

  <Step>
    Note your tenant's data region and use its API base URL: `us` →
    `https://o365-api-us.spanningbackup.com`, and likewise `eu`, `ap`, `ca`,
    `uk`, `af`.
  </Step>
</Steps>

## Configuration fields

| Field                  | Required | Description                                                                                                                         |
| ---------------------- | -------- | ----------------------------------------------------------------------------------------------------------------------------------- |
| `spanning-admin-email` | Yes      | Spanning admin email address, used as the Basic Auth username.                                                                      |
| `spanning-api-key`     | Yes      | API key generated in the Spanning admin console, used as the Basic Auth password.                                                   |
| `spanning-base-url`    | Yes      | Region-specific API base URL: `https://o365-api-<region>.spanningbackup.com` where region is `us`, `eu`, `ap`, `ca`, `uk`, or `af`. |

## Synced resource types

* **Users**: Spanning users from the tenant, mapped as C1 users. Each user
  carries its principal name, email, display name, Microsoft object id, license
  assignment, and admin status.
* **Roles**: A fixed set of seven Spanning role tiers — User, Shared Mailbox,
  Global Admin, Spanning Admin, Archived (read-only), No Microsoft License, and
  Deleted From Microsoft. Each user is granted membership in the roles
  corresponding to its tags.

## Special notes

* The connector authenticates with HTTP Basic Auth. The admin email is the
  username and the API key is the password.
* The base URL is the region-specific host (`https://o365-api-<region>.spanningbackup.com`).
  The API key is region-scoped, so the base URL must match the account's region.
* Roles are synthesized from each user's tags. Spanning has no dedicated roles
  endpoint, so all seven roles are always present and role membership is derived
  from the tags on each user record.
* User accounts that are deleted or archived in Spanning are marked disabled in
  C1.

## Configure the Spanning connector

<Tabs>
  <Tab title="Cloud-hosted">
    Follow these instructions to use a built-in, no-code connector hosted by C1.

    <Steps>
      <Step>
        In C1, navigate to **Integrations** > **Connectors** and click **Add connector**.
      </Step>

      <Step>
        Search for **Spanning** and click **Add**.
      </Step>

      <Step>
        Choose how to set up the new Spanning connector.
      </Step>

      <Step>
        Set the owner for this connector.
      </Step>

      <Step>
        Click **Next**.
      </Step>

      <Step>
        Find the **Settings** area of the page and click **Edit**.
      </Step>

      <Step>
        Enter the Spanning credentials:

        * **Admin email**: The Spanning admin email address.
        * **API key**: The API key generated in the Spanning admin console.
        * **API base URL**: Your region host, `https://o365-api-<region>.spanningbackup.com`.
      </Step>

      <Step>
        Click **Save**.
      </Step>

      <Step>
        The connector's label changes to **Syncing**, followed by **Connected**. You can view the logs to ensure that information is syncing.
      </Step>
    </Steps>

    **Done.** Your Spanning connector is now pulling access data into C1.
  </Tab>

  <Tab title="Self-hosted">
    Follow these instructions to run the Spanning connector in your own
    environment.

    <Steps>
      <Step>
        Create secrets for the Spanning credentials.
      </Step>

      <Step>
        Configure the connector environment variables:

        ```bash theme={"theme":{"light":"css-variables","dark":"css-variables"}}
        BATON_SPANNING_ADMIN_EMAIL=<Spanning admin email>
        BATON_SPANNING_API_KEY=<Spanning API key>
        BATON_SPANNING_BASE_URL=https://o365-api-<region>.spanningbackup.com
        ```
      </Step>

      <Step>
        Deploy the connector using your standard self-hosted connector process.
      </Step>
    </Steps>

    **Done.** Your Spanning connector is now pulling access data into C1.
  </Tab>
</Tabs>